They didn't. It's an iris scan. The article just used "retina" and "iris" interchangeably for some reason. https://worldcoin.org/how-it-works