To show our appreciation for our security researchers, we offer a monetary bounty for certain qualifying security bugs. Here's how it works.
A typical bounty is $500 USD
We may increase the reward for specific bugs
Only 1 bounty per security bug will be awarded

Source:
http://www.facebook.com/whitehat/bounty/