In regards to that, for what he got for it there, if he went to some site like darkode/exploit.in and put it for sale, I have a strong feeling he would of made double if not triple that, as 'hackers' would love to get their hands on a vulnerability, espically since it's facebook thats affected.