There are many 3rd-party API clients for Snapchat that can access all parts of the API (send message, send picture, get picture, etc.). I even wrote one for Java. They are easily accessed from a console with a username/password combo.
Considering how many password dumps are out there, it's reasonable to assume that many people have had their Snapchat login credentials compromised. Now I can use that info, log in from a command line, and start "snapping" myself money.
I know that getting someone's username/password is a pretty high barrier, but not high enough for the ability to send money instantly. Maybe there are more security details, but I wouldn't put my info into this just yet.