I’d rather just take the one time lump sum payout of shorting it and flying over the radar. (Which that dude probably did) If you patiently exploit the vulnerability, then someone else might figure it out or notice.