If I was WhatsApp, I would offer to compensate those who have found the exploit for their work. If someone else buys the exploit I would sue the broker for extortion.
Sure, their rate is $1 million an hour :).
I could see the government jump in and pressing charges but the worst thing Whats-app can do is piss them off.