The keyword here is “up to”.

As if the Pwn2Own contest was not enough, Google will be holding its own competition at the CanSecWest security conference.

Called Pwnium, contest attendees will be asked to exploit the Google Chrome web browser and in return, will be rewarded as follows:

$60,000 – “Full Chrome exploit”
$40,000 – “Partial Chrome exploit”
$20,000 – “Consolation reward, Flash / Windows / other”

So where does this $1 million reward come from? Well, Google will be giving away money not for the first two or three hackers, but for pretty much everyone, who manages to compromise their web browsers security.

As simple as that.

[Thanks to everyone who sent this]