iirc someone on hn said the going rate for zero-days is just $1-2 million. there were at least 3 RCE on chrome just this year: https://www.theregister.com/2022/04/15/google-third-fix-chro...

the math works out for someone to spend it here given the amount of panicky crypto whales trying to get their money out of ftx. (OTOH, the math also suggest that these exchanges should've been hacked long long ago if these cheap zero days exist, so idk)