It depends on the bug. If you are not aware of it, it should be forgiven. But if it was a proven exploitation, then your account would be justified in being punished. Generally, if you know of some crucial bug, do not try to make use of it; eventually, you'll be punished for taking advantage of it. Be fair.