There are two parts to the intellectual property here, the patent and the copyrighted software. The patent is owned by its inventor, but there is an implied license; the company awarded a $10,000 bonus, and the inventor then wrote the software in his role as an employee of the company, so his conduct implies acceptance of the company use of the patent in this way. The software itself is wholly owned by the company, but it cannot be used or sold without a valid license.
(It's conceivable that the software was also written in the employees own time and on the employees own equipment, in which case its just about possible that the software is separate from the employment contract. However even in this case there is a clear license under similar terms to the implied patent license.)
At this point I have to wonder about the amount of common sense of the parties;
Many companies have clauses in their employment contracts about employee inventions, but the question doesn't mention one.
For self-protection both sides should have had a proper patent license drawn up, as the terms of the implied license are very vague. Can the company sell the software? Can it use the patent in other software? Is the license exclusive? What happens if the company is acquired? All of these are left as open questions.
However I'll get back to the original question. The logic bomb is entirely in the software, which was written as a work for hire by the employee. The patent is therefore irrelevant.
Logic bombs of this kind are illegal. In addition to civil damages, wiping data from a computer without authorisation is a violation of the Computer Fraud & Abuse Act
(a)(5)(c) intentionally accesses a protected computer without authorization, and as a result of such conduct, causes damage and loss.
Maximum penalty is 5 years, or 10 years if done for gain. However I don't see a "for gain" element here; the logic bomb seems to be pure revenge.
As to the specific claims of the developer:
the employer "has no legal ownership claim to the application or code or their use"
Wrong. The application code was written as a work for hire by the employee, acting in their role as employee. Even if the employee can prove that they own the source code, the company still has an implied license, and that license does not terminate with the employee's employment.
the employer assumes all liability for damages since it did no third party testing
I don't know what the term "third party testing" means here. If the software was written as a work for hire then testing, either by the developer or another employee would be routine. Software almost never works perfectly first time, so the idea that no testing of any kind was done before the software was placed in operation is simply not plausible. If the software is licensed then the allocation of liability would be a term of the license, but in the absence of anything in the license then the normal application of care and skill (which would include testing) would be required to avoid liability.
However here we are not talking about liability for ordinary defects. A logic bomb is a deliberate function engineered into the software by the developer. Its the difference between kicking a football which accidentally goes through a window versus deliberately throwing a brick through the window. It might also be worth noting that hidden functionality of this kind would not be found through any ordinary testing.
Furthermore this logic bomb did not merely disable the software, it deleted files which were created and owned by the company (software developers have no ownership rights in the output of their software unless the output contains substantial fragments which were built in to the software). This was done with the intention of harming the company. This damage was not authorised by the company, and hence falls under the CFA (see above).
