Rewards are distributed to white hat hackers based on the severity of the vulnerability. This bounty program focuses on preventing Direct theft of any user funds, Permanent freezing of funds, Insolvency, Unable to call smart contracts, etc., and much more. Here is a quick table for reference: