Amongst more than 1,000 vulnerability reports involving government systems submitted via bug bounties and public disclosure schemes, 496 have been ascertained to be valid.
Article Link: Half of vulnerabilities Singapore government finds via bounties, disclosures are valid | ZDNet