One LLM prompt can't get you $500K. Why would someone spend $500k instead of just prompting themselves?

Because they don't know you can

I think anyone willing to pay $500k is well aware that LLMs can be used to find vulnerabilities.