SQL injection? WHAT?
SQL injection is like one of the fundamentals of web hacking. Hell, I can do it.
This is seriously making me worried about the security of online market services related to Bitcoin.
This is what's most important to me too. They say they're still investigating but it doesn't seem that much of a great search to me to find the spot of injection. If they are actually taking this long, I hope they do publish is as soon as they find the hole. It'll be shamefull for them, no doubt, but it would be good as other bitcoin exchanges and business can quickly fix their simular holes before being noticed.
I'm not worried about the end of bitcoin. I do worry about the people in the 'common' world looking at bitcoin now, with these incidents giving them proof that bitcoin is exactly that what they want to see of it.