Should be noted that the money was returned.
Still, it's an exploitable vulnerability. Very difficult to make the conditions happen, but if they happen naturally it's something that can be taken advantage of. It'll need to be addressed in one way or another.
What IRC channel out of curiosity?
But if it happened like you think, I definitely agree with you.