Testing things and finding exploits is fine **as long as you do not massively affect other people**.

There is no written rule "don't cause sudden rep loss of 1500 reputation points to various users at once just because you want to test something". That's just common sense.