[csense]

You don't really even need to go as far as reverse engineering the protocol to game the system. You can just run as many copies of the browser as you like, each in its own VM, and have scripted mouse/keyboard actions pretending to read content.

Reverse engineering the protocol would probably allow a very resource efficient exploit, but it's far from the only point where the protocol can be corrupted by a user with fraudulent intent.