Stop using it and report it privately through Support Center as a Bug Report. Don't post how it works anywhere public, including Discord, the feed, or Room chat.
What counts as an exploit?
Anything that gives an unfair or unintended result, such as duplicating items or Gold, getting rewards or event points you didn't earn, getting around a restriction, or seeing information you shouldn't be able to see.
How do I report it?
Open the menu (the three-line icon), or go to Settings.
Tap Support Center and choose Bug Report.
In the title, say it's an exploit.
Describe what you did, what happened, and when. Attach a screenshot or recording if you have one.
Your ticket is private: other players can't see it.
Will I get in trouble for reporting it?
Reporting an exploit is the right move. What can get an account restricted is using an exploit or sharing it with others, which breaks the Community Guidelines and Terms of Service. If you triggered something by accident, say so in your report.
Do I get a reward for reporting an exploit?
There's no published bug bounty program, and reporting doesn't guarantee a reward.
What about scams, phishing, or a hacked account?
Those aren't exploits. If someone got into your account, choose Hacked Account Report in Support Center. To report a player, see How do I report another player?