The hacker declined to share details of the vulnerability with the game's maker and publisher because neither had a bug bounty.