Are there researchers out there testing whether facebook regresses security fixes?

Or would the effort not procure enough reward?