Yup, confirmed by Facebook on the linked blog post.

That seems like a nice chunk of money. I can't help but think about how much his exploit would be worth on the black market though. 10x that amount maybe? I have no clue.

Either way, being able to put a bug find like this on your resume is probably worth a lot more than those payouts.