A bug bounty hunter claims to have made six figures on multiple occasions, with a single-day payout of $160,000 being his highest. He found a vulnerability 16 times on a single company's website.