One security researcher has been rewarded with more than $7,000 for finding six serious bugs in the social networking site.
...
The minimum amount paid for a bug is $500, said Mr Sullivan, up to a maximum of $5000 for the most serious loopholes. The maximum bounty has already been paid once, he said.
Many cyber criminals and vandals have targeted Facebook in many different ways to extract useful information from people, promote spam or fake goods.

Facebook have started paying out to hackers that find loopholes or exploits in, er, Facebook.



More and more companies are offering cash incentives to third parties (ie the public) for finding exploits in their products. I guess it certainly beats waiting around for other people to do it for "the lulz" to huge embarrisment later on.

BBC News - Facebook pays for security loopholes