If I got it right, some of abused withdrawals is still pending? What is actual site's loss?
Sadly, yea, opinion of most players is smth like "What's point of bug reporting? They will pay me like 50$. Better to abuse it". But when same people accidentally gets victims of some scam, they are crying as loud as can, that it's not fair!

Abusing found bug is same scamming actually...