Why do people in discussions base the punishment on the $2000 he is accused of having earned not on the act of selling a cyberweapon?

If I sell someone Anthrax for $1, my punishment should be based on the $1 amount?