To update you:

Me and Lukealonso found a fix to strongly mitigate the MITM attack (luckily with no hard-fork)  and we are publishing it to the repo today. I will keep an eye on other vulnerabilities both in the protocol and the code.