They aren't lying, they are saying their tool was used in the process of finding this bug. Was it not?