Maybe I misunderstood, but all of them either "thought" that was the right thing to do or signed off on it. Even if the software should have warned them, shouldn't they have known the correct transactions to make?
They all thought they were making the right transaction. There was no warning that they were not.
It would be like if I hit the reply button here on Hacker News and instead of the comment I typed out it my reply contained my bank account information. And I was not told something I do not want to happen would happen by doing so.
Thanks for the explanation. It saddens me how brutal people here are in response to a misunderstanding, judging by the downvotes, but oh well.