Thank you very much for the bounty.
The last time I came up with those two flaws (i think I came up with them here in the thread) I got laughed at and so I forgot about it.
Now I, just for the sake of it, posted them in the bounty thread and one of them was the 100,000 NXT hit

Thank you very much for the fast payout. Now that I own this many NXT (which I will of course hold) I would like to contribute my part to the project. I have still doubts about the account mining issue ;-) I have made a small reference implementation (which I would never make public except give it to the devs) which is capable of doing 10 Megahashes (or Megaaccounts) per second on a simple CPU. At some point in the future, this might be an issue.
LOL so a few weeks ago all the hell you were raising here and just being sort of an ass, was not really about the live code that we run now, it was really just the old code with the injected flaw? LOL
but, seriously, congrats on the score.