Nowadays this sort of exploits in Chrome uses a chain of several bugs, (remember flash now runs in a strong sandbox as well); I would say it is probable that yo

Nowadays this sort of exploits in Chrome uses a chain of several bugs, (remember flash now runs in a strong sandbox as well); I would say it is probable that your exploit would be obsolete before you find a real buyer in the market. So I would argue that taking the money on the table immediately would be the right thing to do. Also added bonus karma of not dealing with shady organizations, compromising innocent peoples computers, etc.