No, this is <i>not</i> the point of bug bounties. The point of a bug bounty is to find and fix bugs. That&#x27;s why they&#x27;re called &quot;bug bounties&quot;.<p>This person took a bug bounty and ran it as a penetration test.<p>Facebook fixed the one bug he found and paid him for it.