An exploit is technically always following the rules of a system. Take for example a sql injection. The system allowed a sql injection, you told the system to e

An exploit is technically always following the rules of a system. Take for example a sql injection. The system allowed a sql injection, you told the system to execute the sql code of your choice and bam you got what you wanted at the expense of the counterparty. This would still be considered illegal. code is code, code isn't law. Even if you try to call it 'smart contracts'.