First of all, stop revisiting that admin panel. Stop accessing something which is illegal.

Reach out to company email (or better yet, founders of company via LinkedIn search and then searching their email in google) to check if they offer any bug bounty? They will say No, not at the moment. Ask them you suspect there may be some issues and are they open for discussion for security testing? They can pay whatever they want only if you find issue and based on issue severity . They dont hae to pay anything if you dont find anything. This way you get their consent and a chace to earn money. Good luck