If they game you, then game them back. Make the publication (and mitigation) of potential attack vectors into the reputation system worth more points than could ever be earned by exploitation of the flaw, and serve exploiters a large penalty whenever they are caught.

All you need to do is make the expected value of an attack against the system worth less than just doing some actual research.