Wow. this is interesting. Maybe its some payment gateway/credit card refund hack. I have been doing a lot of payment gateway programming and integration lately Looking forward to an explanation of a hack(if any).
By the way, could you tell us which payment gateway/solution you use?