Facebook offers $500 bounty for reporting bugs, joining the likes go Google and Mozilla. To qualify you must be the first to report a bug native to Facebook, not Facebook Apps like FarmVille.

Learn more a Facebook’s Security Bug Bounty page.