Apple itself pays $1-million for bug bounties of this type.
https://security.apple.com/bounty/categories/