I don't see anywhere in the article where it mentioned the "hackers" getting free pizza for life. Seems like they found a bug, tested it once, paid for the "free" pizza they received, then reported it.