Congrats. This is exactly how responsible disclosure is supposed to work. You spend valuable time looking for holes and when you find one they fix it quickly and compensate you for your trouble.

That's awesome. Congrats to making the money, and raising the issue correctly - as well as not going off of the ethical deep end.

Out of curiosity, how much time did you spend on this?

Were you able to do this all with the dummy accounts that Facebook provides for the Bug Bounty program or did any steps require a genuine account? Just curious as I always wonder whether there are bugs that affect genuine accounts and not dummy accounts or vice-versa.

That's awesome.

Also sounds like you should maybe try to move to a different country, if you can!

Probably worth $500k to government actor.

Svaka cast druze :)