I doubt he has an accomplice. I think he's intimately familiar with the RFID system, including having had direct access to the actual one being used on Stones Live (per his connection to them that was observed on Linkedin), and enabled a multiplexing debug feature to send his phone a stream of every card being read.