I think you misread the article, it's the first time there's a $1m on the table for a WhatsApp exploit, not that someone has found an exploit.

Edit: Apparently I heard on the grapevine there is actually a WA 0-click being submitted: https://www.youtube.com/live/hM3z_5yT3Os