Coinbase awarded a $500k bug bounty