"After reviewing the issue you have reported, we have decided to award you a bounty of $12,500," Facebook told him in an email the same day.