I imagine there could be a similar reputation market along the lines of the write-my-college-paper services, in which you sell the bug to someone who can then t

I imagine there could be a similar reputation market along the lines of the write-my-college-paper services, in which you sell the bug to someone who can then take credit for it. Certainly I'm sure you could find some people who'd be prepared to pay for a valid Knuth error, although exactly how you'd advertise/seek those who have such things would risk wrecking the value of the thing you seek to acquire. Stepping up from that, there are clearly existing markets for exploits, and you might be able to sell potentially exploitable bugs in the same way.