It's fun to noodle about! But so far as I know, nothing like this has ever happened: nobody has gotten whistleblower protection from 18 USC 1030 charges, and there is no obvious legal pathway to get it from any agency of the federal government. Sell your bug to a carding ring, then go to the FBI and ask for immunity in exchange for helping them bring down the ring; that's the closest I can think of.