I think he has played with the faucet script. The script is using a rpc-call to the wallet to withdraw.
Every time when you withdraw via rpc-call a new sub wallet address will be created and the amount minus the withdrawal will be deposited there.
Anyway he/she should give you the coins for a 3rd round.