The hacker who found the critical security flaw in Steam's payment process promptly reported the exploit to Valve and has since been rewarded for his honesty.
https://www.notebookcheck.net/Hacker-receives-US-7-500-bounty-for-reporting-exploit-that-allowed-him-to-add-unlimited-funds-to-his-Steam-wallet.555640.0.html