You found a problem, tried to warn them. They didn't listen, so you showed it to them, without harming anything (aside from a few egos). That's doing the right thing.
No, a douche would have sold this exploit to an underground group. You just drew attention by show-hacking a big player, preventing other people finding the exploit while this goes unwatched - that's honorable in my opinion.
You did it under your own full name. For me that's enough to consider your intentions to be good, even though it might've been smarter to try a bit harder to bring attention to the issue in other ways first.