I'd point out that if this is a case of incorrect data entry, similar cases happen in traditional finance with some regularity, and in the majority of those cases (e.g. someone sends a large amount to the incorrect bank account), there is no legal recourse to recover those funds and companies resort to asking nicely for the money back (usually it works).