Anyways... I'm pretty sure I know or suspect what is going on, but don't really want to discuss attack details in public ;/
Please do. For the sake of honesty and the benefit of others.
Maybe.. Though I don't know if I am convinced enough from looking at the "state of security" of crypto development currently that doing so would prove beneficial. Seems no one gives a shit. Unless I am missing some good discussions that are out there..