They provided an update last December[1] and stated that two rewards have been given. The same update is also interesting because it mentioned the migration from Google Code to Github (three months ago!). The blog post talked about Yahoo! contribution to the project too...
[1] http://googleonlinesecurity.blogspot.com/2014/12/an-update-t...