Well, if you found a bug that allowed you to log into someone else's bank account and remit all their money to your own account, would exploiting it be right?
E.g. put in a transfer order for $10. Use bug to actually transfer $2000, but your balance is only credited for the $10.