Report and delete. If you’re lucky, you’re not the one to discover it and it hasn’t federated yet, so you defederate preemptively.

I know at least one admin, who quit because he was afraid of police raids because of child porn. He said that the US police are quite uncompromising in such cases, but I’m not from the US so I don’t know, EU rules seem a lot saner.