http://www.tangleblog.com/wp-content/uploads/2018/02/letters.pdfI read the leaked emails between the iota team and DCI.
I try to make a summary of the 124 pages of emails:
DCI: hey i found some vulnerabilities in iota.
IOTA team: thanks for telling us. What is the weakness?
DCI: something with curl (don't roll your own, not peer reviewed, cryptography!).
IOTA team: thanks, we were planning to change it to Keccak. How were you planning to attack iota based on the vulnerability?
DCI: don't know, i am busy right now. When are you going to take care of the vulnerability?
IOTA team: wait let's get the facts straight and analyze your attack.
DCI: Trust me it is not done to roll your own cryptography (no go).
IOTA team: ok, but what about the attack?
DCI: You fixed the vulnerability not? so we can publish our findings, you can read the attack in publication.
IOTA team: How about us responding to the attack? We still think an attack would not be successful.
DCI: We are done with you, don't insult us. We are going to publish.