{
  "total_reports": 2056,
  "total_bounty": 14812854.0,
  "avg_bounty": 7322.22,
  "by_year": {
    "2015": {
      "count": 38,
      "total_bounty": 82337.0
    },
    "2016": {
      "count": 44,
      "total_bounty": 96000.0
    },
    "2017": {
      "count": 41,
      "total_bounty": 97000.0
    },
    "2018": {
      "count": 22,
      "total_bounty": 32000.0
    },
    "2019": {
      "count": 17,
      "total_bounty": 59000.0
    },
    "2020": {
      "count": 155,
      "total_bounty": 1027200.0
    },
    "2021": {
      "count": 375,
      "total_bounty": 2984500.0
    },
    "2022": {
      "count": 449,
      "total_bounty": 2876500.0
    },
    "2023": {
      "count": 461,
      "total_bounty": 2642337.0
    },
    "2024": {
      "count": 133,
      "total_bounty": 1281480.0
    },
    "2025": {
      "count": 279,
      "total_bounty": 3268000.0
    },
    "2026": {
      "count": 35,
      "total_bounty": 312000.0
    }
  },
  "by_severity": {
    "S3-Low": 1830,
    "S4-Minimal": 212,
    "Unknown": 8,
    "S1-High": 5,
    "S0-Critical": 1
  },
  "by_status": {
    "Assigned": 1581,
    "Accepted": 365,
    "Fixed": 64,
    "New": 30,
    "Verified": 15,
    "Unknown": 1
  },
  "by_component": {
    "Blink": 921,
    "Internals": 379,
    "UI": 376,
    "Platform": 147,
    "Unknown": 123,
    "Mobile": 31,
    "Dawn": 30,
    "Enterprise": 10,
    "OS": 7,
    "Speed": 4,
    "IO": 4,
    "PDFium": 3,
    "Services (Use Subcomponents)": 3,
    "Privacy, UI": 3,
    "Privacy": 3,
    "Dawn, Dawn": 2,
    "Enterprise, Platform": 2,
    "Infra": 2,
    "Test (Use Subcomponents)": 1,
    "Dawn, Internals": 1
  },
  "bounty_histogram": [
    {
      "range": "$0-500",
      "count": 1
    },
    {
      "range": "$500-1K",
      "count": 111
    },
    {
      "range": "$1K-3K",
      "count": 501
    },
    {
      "range": "$3K-5K",
      "count": 294
    },
    {
      "range": "$5K-10K",
      "count": 631
    },
    {
      "range": "$10K-20K",
      "count": 305
    },
    {
      "range": "$20K+",
      "count": 180
    }
  ],
  "top_bounties": [
    {
      "id": "453094710",
      "title": "Out-of-bound read in the jmp table of ActiveMediaSessionController leads to sandbox escape.",
      "bounty_amount": 250000.0,
      "severity": "S3-Low",
      "year": 2025
    },
    {
      "id": "412578726",
      "title": "ipcz bug can allow renderer duplicate browser process handle to escape sandbox",
      "bounty_amount": 250000.0,
      "severity": "S3-Low",
      "year": 2025
    },
    {
      "id": "377803496",
      "title": "MiraclePtr bypass due to PtrCount overflow",
      "bounty_amount": 100115.0,
      "severity": "S3-Low",
      "year": 2024
    },
    {
      "id": "340122160",
      "title": "MiraclePtr bypass due to PtrCount overflow",
      "bounty_amount": 100115.0,
      "severity": "S3-Low",
      "year": 2024
    },
    {
      "id": "446722008",
      "title": "heap-use-after-free in content::indexed_db::Database::connections_ when force_closing_ is true",
      "bounty_amount": 100000.0,
      "severity": "S3-Low",
      "year": 2025
    },
    {
      "id": "433533359",
      "title": "Consumers of ReadableStream subject to data race with SharedArrayBuffer, leading to RCE + V8 Sandbox bypass",
      "bounty_amount": 70000.0,
      "severity": "S3-Low",
      "year": 2025
    },
    {
      "id": "400086889",
      "title": "Arbitrary Wasm type confusion due to transient canonical index overflow",
      "bounty_amount": 62000.0,
      "severity": "S3-Low",
      "year": 2025
    },
    {
      "id": "446113732",
      "title": "Wasm type confusion due to spec unsoundness in `cast_desc` operations",
      "bounty_amount": 55000.0,
      "severity": "S3-Low",
      "year": 2025
    },
    {
      "id": "446122633",
      "title": "Wasm type confusion due to wrong reachability analysis in `WasmGCTypeAnalyzer::ProcessBranchOnTarget()` with custom descriptor casts",
      "bounty_amount": 55000.0,
      "severity": "S3-Low",
      "year": 2025
    },
    {
      "id": "446124893",
      "title": "Wasm type confusion due to custom descriptors spec ambiguity in `ref.get_desc` exactness typing",
      "bounty_amount": 55000.0,
      "severity": "S3-Low",
      "year": 2025
    },
    {
      "id": "446113731",
      "title": "Wasm type confusion due to custom descriptors spec unsoundness on `ref.func` exact typing",
      "bounty_amount": 55000.0,
      "severity": "S3-Low",
      "year": 2025
    },
    {
      "id": "446124892",
      "title": "Wasm type confusion due to missing exactness check on JS-Wasm boundary",
      "bounty_amount": 55000.0,
      "severity": "S3-Low",
      "year": 2025
    },
    {
      "id": "400052777",
      "title": "Signal SIGTRAP in v8",
      "bounty_amount": 55000.0,
      "severity": "S4-Minimal",
      "year": 2025
    },
    {
      "id": "391907159",
      "title": "WasmCode \"resurrection\" using the WasmImportWrapperCache can lead to JIT allocation UaF, causing memory corruption",
      "bounty_amount": 55000.0,
      "severity": "S4-Minimal",
      "year": 2025
    },
    {
      "id": "388290793",
      "title": "WebAssembly out-of-bounds memory access due to broken memory64 guard page assumptions",
      "bounty_amount": 55000.0,
      "severity": "S3-Low",
      "year": 2025
    },
    {
      "id": "380397544",
      "title": "Arbitrary WASM type confusion due to improper fix of b/379009132",
      "bounty_amount": 55000.0,
      "severity": "S3-Low",
      "year": 2024
    },
    {
      "id": "368241697",
      "title": "Type confusion due to improper WASM module size check in `AsyncStreamingDecoder`",
      "bounty_amount": 55000.0,
      "severity": "S3-Low",
      "year": 2024
    },
    {
      "id": "483569511",
      "title": "Heap-use-after-free in blink::FontFeatureValuesMapIterationSource::FetchNextItem",
      "bounty_amount": 50000.0,
      "severity": "S3-Low",
      "year": 2026
    },
    {
      "id": "467247247",
      "title": "Maglev's handling of target and new.target is incorrect",
      "bounty_amount": 50000.0,
      "severity": "S3-Low",
      "year": 2025
    },
    {
      "id": "454485895",
      "title": "Incorrect Optimization of ArrayConstructor by Maglev Leads to Creation of Malformed JSArray Objects",
      "bounty_amount": 50000.0,
      "severity": "S3-Low",
      "year": 2025
    }
  ]
}