[richardfey]

Could have been sold for up to 300k or more on the black market.

[pmontra]

Maybe it was an already well known exploit. After all this was a duplicate and Google was sitting on it. Two people found it and reported it to Google. Why not a third one, and sold it?