Security researcher is paid $12,500 by Facebook
 

Security researcher Arul Kumar was paid $12,500 by Facebook, after discovering and reporting a bug that would allow any user to delete the photos of other Facebook users, simply by changing parameters in a URL. The severity of the security flaw apparently induced Facebook to pay Kumar far more than the base bounty of $500 [...]

http://vr-zone.com/articles/security...-security-flaw