Wow, that's unfortunate for those folks who were trying to post true content and some got lucky to get fake votes and reward.
I must say, nicely done finding this exploit. Hope they will fix this or revert some fake votes, if possible.
Otherwise, people who are already using it might loose faith. After all, application is hosted on some server, even though backend is decentralized/blockchain. It can still be vulnerable, be hacked in future, isn't it?!