First off, if you win, even if you win big, a legitimate casino will allow you to withdraw the money. You don't need to wait or anything. Secondly, if you are capable of finding bugs, it means you are a good coder and you can make good money as such. Also, you can report the bugs and be rewarded by casino for that. It's a pity that sometimes talented people opt for illegal activity, while they can earn good money legally.
Because if you can find the bugs in the casino, you can use it for your own benefit, and the money will be bigger than what the casino can give to you. That is why people try to search for the bug, and even if the casino makes competition for them to find if the casino has a bug or not, they will not have a big interest because I think they already know the bugs before and use it for themselves.
It is why we should play on the legitimate casino and do not try to break their rules so that we can withdraw the money anytime we want, in small money or big money.