It should be about learning. I think finding exploits should be encouraged and rewarded.