Sonic told us on Twitter that he is the third person. Which I suspected from the start, because how else would Jordy know who the third person was if it wasn't Sonic, given that they communicate often.
And he found the exploit just half an hour later. Which seems impossible to me, a huge...