19-year-old white hat earned a million dollars from bug bounty hunting