This is not a bug, in some cases the previous owner has this domain up for sale through Aftermarket vendors (prior to AND post lapse). Many seller and Aftermarket Vendors are not realtime in delisting domains they do not own. Some domains slip through the cracks until future verification steps...