[jotadambalakiri]

I don't think it's so easy to sell a vulnerability on the black market. If you send the code first they will have no incentive to send the money, if you get the money, you might not send the code.

[dannyw]

You don't have to send the quote, you can demonstrate it, e.g. on a dummy shared account where you bypass all quotas.