Plot hole: The kids in Soneji's class use an encrypted GIF algorithm to pass notes to each other and that "drives the teachers crazy", since they are unable to catch cheaters that way. But how do they do that? Easy, they have a message system in place installed on their workstations, that warns them with a big pop-up that they've got "A new message"! It would be easy to sanction and prevent the cheating by simply removing the chat application, no matter if they use it to chat directly or pass Michael Jordan photos as shown in the movie, which they have no business doing during an assignment anyway.
Plot hole: With over two years spent teaching at school, nobody (students, coworkers) ever noticed the rubber face and rubber hands of 'professor Soneji' - and he teaches computer science, having to get close to people constantly looking at their screens and interacting with them - as shown in the classroom scene. Nothing is also said about the name being an alias and how he managed to teach to the super-elite school where daughters of senators and the Russian President (what is he doing attending middle school in the US anyway?) with no credential, or fake ones (the degree shown is in Mercusio's name). You'd think the vetting for the staff there would be iron-proof. He has also been wearing a fake gut, and something like that would have easily showed up if he ever got as much as a pat-down, which at a place with security so tight, is certainly a possibility.
Plot hole: Jezzie has files about Dimitri in her computer and is the one who asks Cross to do the stake-out at the embassy. She knows of Soneji's plan to kidnap the Russian kid, but wants it to fail, since she is more than content with the millions of ransom for Megan. This part does not make sense on any level; she can't know on which day Soneji is attempting the kidnapping, and since she and her accomplice know where he is hiding (or else they wouldn't be able to grab Megan from him when he is away), by all means they should have killed him rather than run the huge risk to let him try to kidnap another kid at the well guarded embassy and have him killed or worse, captured, before they can do their scheme replacing him. For their plan to succeed, Soneji needs to be dead, so he won't mess up for his delusions of grandeur.
Plot hole: Cross says that the best strategy to keep the kid alive is to pamper Soneji, stroke his ego and make him a living legend as he wants to be. What Soneji did though, was guide them to his real identity and name, since Soneji is just a front he used to be employed at Cathedral School, and in the first conversation with Cross he said about the Soneji name "That'll do for now." It's obvious to anyone then that he wants his real name and self to emerge from obscurity and drop the alias, and if Cross really wanted to please the kidnapper, he should have used his real name, Jonathan Mercusio. Despite these clear elements, that name is never used or referenced in the movie again.
Plot hole: From a logistic and tactical point of view, the whole police/FBI operation revolving around the diamonds does not make any sense. The agents are supposedly spread around and in great numbers, but everyone is simply chasing him, while Cross is speaking freely through the radio and shares the addresses and instructions so they should be -ahead - of him, they know where he is going! Although, during the action, Cross tends to speaks directly with Jezzie all the time, as if all the other dozens of agents did not exist. Jezzie's presence itself is completely illogical, too, since Soneji ordered that nobody would follow Cross or he will kill the girl, and Jezzie is the one agent that he knows (she's been the kid's bodyguard for 2 years!) and is sure to recognize. She should be nowhere near the chase, but nobody objects at all.
Plot hole: Devine is in the hideout. It is late evening/night. Nothing in the timeline here makes sense. For starters, the newscast says that "over a week ago" the manhunt for Soneji started. Cross gets on the case the first day, on day 2 they find Mercusio's home, day 3 the failed embassy run and Megan is taken away from Soneji (but nobody knows), day 4 is the jewelry heist, leaving Soneji to be killed the same day or after (the movie messes up on that account but seems to want it to happen the same day, I'd give it another day, making it 5). Moreover, it says that Soneji was killed late in the afternoon the day before; it means that Jezzie waited more than a whole day to go to him, and Devine's comment about the kid being so doped up she didn't realise she is not on the boat makes no sense when it implies she'd have to sleep for 2 days straight instead of one. (01:23:00)
Plot hole: There is a massive problem in the timeline of the movie, starting when the 'running game' is set. It is dawn when the kidnapper contacts the family and the police. He says, that he will call back in 9 hours, and even says "4 PM sharp." The events unfold, and Cross is on the metro train during rush hour, firing his gun. But at the press conference that follows, agent Ollie McArthur declines to comment on the "incident on the MTA train this morning." (01:03:05 - 01:10:00)
Plot hole: In her plot convenient computer content, Cross finds the address of the house for lease Jezzie has. The house is located in Lovettsville, Virginia. That means it's over one hour away from the apartment in Washington. If we take at face value what happens in the movie, with Cross breaking into the house once Jezzie has killed Devine, then it's impossible he made it in time to catch her and save Megan. One wonders what took Cross so long anyway to get to the house considering he visited the school that tipped him off about Jezzie when students were still around, and why he does not warn the authorities (which is kinda hilarious since what tips Megan off about Jezzie, is that she came alone, exactly what the hero does!). The timer on the computer screen when Cross finds out is 00:00:00, which is a bit unlikely and not much help. (01:29:00)
