WoolyPooly was attacked in a similar way recently.
I believe half of the young pools are subject to similar attacks. This is difficult to detect such at low hashrate. I first learned about this more than two years ago and continue to notice. This is the eternal struggle between good and evil

It's a fight of skills. Yes, many vulnerabilities have been known over the years. Some were received recently. I have not invented anything new, I have only combined it all into a userfrendly device.
Because it is based an FPGA it can be updated via the internet.