if there's a button that says "free money (don't press)" and you press it's absolutely the fault if the company for leaving the button out in public. It should be expected that any user input can and will be abused.
banks are legally obligated to credit checks within like 24 hours of deposit, there is no glitch, you could do the same scam at any bank, its extremely common. the alternative is congress turns back the law and banks start holding your deposits for as long as possible before crediting them.