It's a bad headline and low-content article, but that's not really the point. The bug presumably made some filter for suspicious transactions ineffective, and this was detected by some sort of manual process audit. The headline should have been "Deutsche Bank fails to properly audit its money laundering detection for 10 years".