Well, yeah.  "Oh, we tested the code, but we can't be expected to have tests that make sure it's going to work in production" as an excuse is completely amateur hour.

Unless, of course, "irrevocably firehosing money at random strangers" is one of the spec'd features of their software, in which case I fully apologize for implying that it wasn't well-tested.