He certainly did have some real accomplishments: https://wangxiaofeng7.github.io/ now, why would the S&P award, possibly the most prestigious, omit the title and subject of his paper?
From the abstract: "popular online stores (e.g., Buy.com... Amazon Payments) all contain serious logic flaws... As a result, a malicious shopper can purchase an item at an arbitrarily low price, shop for free after paying for one item, or even avoid payment."
So, not too keen on discussing his offensive cyber research exploiting major US websites 😅
Could totally see the FBI overreacting about stuff like that despite coordinated disclosure. Or maybe having more solid spying evidence. Who knows.