Ask HN: What would you do if you discover a security breach on iOS/Android?

Would you report it or try to monetize on it? It looks like iOS breaches with root access are extremely wanted and might be well paid, so my hypothetical question is: would you report it or wold you try to monetize in some other ways? I haven't' talked found anything relevant, but I am curious to know what people would do and what are the general thoughts about bounty programs.