Yeah this seems like a baseless claim to me. I work on these kinds of applications and we always assume that an order is eligible to execute from when it's sent until the exchange confirms it has been canceled/deleted. This is pretty standard and it's surprising that a big bank would have such an obvious hole in their risk system, and disappointing that they would then fail to take responsibility for their own mistake.