There is a chance I suppose that they are just using it as an excuse but lets say they arent, just for discusson, What should they have done?
I think their initial post may have been vague because they didnt want to allert everyone to the fact that there was a potential security problem. But then why did the people in the know rubbish their second statement with the reason they had closed the withdrwal lines?
It all seems a bit confused, dont the devs talk to the big exchanges?
They could have handled it better by implementing the protocol correctly in the first place. It's like complaining that Spanish is a flawed language because the fact that "embarazada" means pregnant and not "embarrassed" confuses you.