How would I go around reporting an exploit that I have found?
Personally I would put it in the bug section, so that the admins can see it and fix it.
If it's an exploit, it'd be best if you send a developer a PM.
Wouldn't it be better to have a Staff Support section? Where only admins can see the thread.