[IncRnd]

The researcher would probably get paid even less, if that is the case.

The value of an exploit has nothing to do with the development time.