He found a flaw in the system and exploited it. Although he didn’t do anything particularly wrong, the tools he used allowed him to do it. Yet, somehow he has to pay the consequences and the companies that made the tools to exploit the system are not liable. Got it.