If the bank credits your account by mistake and you withdraw the funds they will come after you. This is probably the same thing.

On the other side of the coin why was this code tested on a live site and not testnet coins ?