Also, who is in charge of writing the code and hence responsible for not finding the bug? They should be involved in some way, too. And I would like to read a statement of some sort, maybe a little more info. They're getting paid to do a save job, but they didn't, and now someone else is being paid for finding the flaws in their work.
I don't know how the coding industry works, but when my coworkers screw up, they have to pay part of the damage.