Yes, the poorly written code allowed them to LEGALLY get the coins.  This is not a hack, just poor coding.  Eth can NOT recover from this.  Tarnished forever.