Google paid out over $6.5 million in bug bounty rewards program