I think the issue here is with the action and inaction on your part. Let us say for a moment the OP has been exploiting a vulnerability in the game... the question arises why did you not pull the game since there was already a well known exploit out there according to your own comments? By allowing members to play a game that you knew had vulnerabilities shows you enticed them to play therefore you have to honour any winnings.