Facebook had better up that payout on the other two vulnerabilities he found.