http://hackingdistributed.com/2016/06/17/thoughts-on-the-dao-hack/
More technical info here:
http://hackingdistributed.com/2016/06/18/analysis-of-the-dao-exploit/
To say that there were just a few flaws would be generous. It seems that in their rush for accumulating a pile of money, someone forgot that code-as-a-contract means you have to be very SURE you're doing things correctly.
These are exactly the kind of information that I was looking for. The DAO's been a great idea for their funders but not for their investors.
I am getting increasingly convinced it has been a kind of friendly fire to get some funds out.