Well...I reject that dichotomy. If someone intentionally introduces an exploit, sure. But I can think of numerous examples where someone found "bugs" and exploited them, while playing by criminal and ethical rules. It sounds like you realized that these are just rare and hard to reproduce without taking on more legal risk. Hats off to the people like the Stats PhD I linked to who ran a multi-person outfit and everyone has kept their mouth shut.
A similar exploit happened recently where a syndicate bought all of the lotto combinations. The math was straightforward, but execution was hard. They had to spin up a few licensed terminals at shuttered storefronts to execute all of the purchases. This forced a rule change.