Could online bug hunting make me rich?

How easy is it to find security bugs on websites that might be exploited by cyber-thieves?