Selling exploits isn’t subject to criminal sanctions

There are no issues reporting the income on tax filings