I don't know much about bug bounties & responsible disclosure, it's not my field, so bare with me here... If they were paid a bounty, and the issue is being ad

I don't know much about bug bounties & responsible disclosure, it's not my field, so bare with me here... If they were paid a bounty, and the issue is being addressed albeit slowly, isn't releasing a toolkit to exploit the backdoor prior to a working fix likely to contravene the conditions of the bounty being paid? Or is there a fixed timeframe MS had to fix the issue before the researchers could go public?