> At least on Hackerone this seems to be by far the highest Bounty

You can't know that, not all bounty amounts are disclosed, and there's also private/confidential programs.