Here's a list of blog posts we've made along the years related to the Vulnerability Reward Program.
  1. https://blog.chromium.org/2010/01/encouraging-more-chromium-security.html
    Chromium launches it's own VRP, similar to Mozilla's
  2. https://security.googleblog.com/2010/11/rewarding-web-application-security.html
    Google launches it's VRP, following Chrome's (this was the first 1337 reward, to answer her question)
  3. https://blog.chromium.org/2012/08/chromium-vulnerability-rewards-program.html
    Larger rewars for Chrome
  4. https://blog.chromium.org/2012/10/pwnium-2-begins.html
    Chrome runs Pwnium 2 on HITB
  5. https://security.googleblog.com/2013/06/increased-rewards-for-googles-web.html
    Google increases rewards (2x) for XSS and a few other types of bugs
  6. https://security.googleblog.com/2013/08/security-rewards-at-google-two.html
    Google+Chrome reach the 2MUSD mark
  7. https://security.googleblog.com/2013/10/going-beyond-vulnerability-rewards.html
    Launch of Patch Rewards, for OSS
  8. https://security.googleblog.com/2015/01/security-reward-programs-year-in-review.html
    We launch Research Grants, paying people before they find any bugs
  9. https://security.googleblog.com/2015/02/pwnium-v-never-ending-pwnium.html
    Last Pwnium organized by Chrome, it becomes a forever-running contest
  10. https://security.googleblog.com/2015/06/announcing-security-rewards-for-android.html
    Android VRP is launched
  11. https://drive.googleblog.com/2015/12/keeping-things-safe-should-be-rewarded.html
    1MUSD of budget for Grants allocated by Google Drive
  12. https://security.googleblog.com/2016/01/google-security-rewards-2015-year-in.html
    Year in review summary from previous year, we talk about the $6006.13 reward to Sanmay
  13. https://security.googleblog.com/2016/06/one-year-of-android-security-rewards.html
    Android VRP is one year old, and issued a lot of rewards
  14. https://googleprojectzero.blogspot.com/2016/09/announcing-project-zero-prize.html
    Project Zero prize (something like pwnium, but for Android) launched
  15. https://security.googleblog.com/2017/01/vulnerability-rewards-program-2016-year.html
    Year in review summary for previous year, we talk about dancing alert() videos, donations and some of our Indian researchers
  16. https://security.googleblog.com/2017/02/80211s-security-and-google-wifi.html
    We announced that Google WiFi and OnHub are in scope of the Google VRP
  17. https://security.googleblog.com/2017/03/vrp-news-from-nullcon.html
    We increased reward amounts again, this time from 20k to 31,133.7 USD