Rule 101 of exploiters/hackers.

 Never flap your lips until you've subverted the network. THEN you hold the cards. Otherwise, its just bluff.
 IMHO, at very worse, that guy found a simple bug that is too easy to detect if attempted, and is using it as bluff leverage to try to gain from it indirectly.