As a website dealing with millions of user funds, their security should have been on par with that of big banks.
Does Deutsche Bank use php? Does HSBC use fucking MYSQL??? Do any of those banks comment out lines in production code for debugging?!?!?!?


Projects written by a single person don't need to be developed as academics say. If u were an owner of an exchange and didn't trust to any other coder u would go the same way.
That's exactly the problem, it shouldn't be written by only one clueless guy!!!
Bitcoinica failed for the same reason - bad coding and no security.