[tptacek]

It's not a crime to sell a security flaw! It is, on the other hand, probably a crime to abet computer fraud, which is what you'll have done if you accept money from someone in return for an exploit you had that they subsequently use to break into Facebook.

[tomjen3]

That could be stretched to making it a crime to sell maps (plan a getaway), kitchen knifes (stabbing) or gasolin (arson).