Given the fact that the pool operators couldn't find any flaw in their billing system I think it could have been victim of a block solution withholding attack.