I doubt he's lying, those zero days exploits are very expensive and it's not like you want to burn them for investigating some small theft