ive heard about the flaw too but so far no coin has been taken out like the attackers claim the can do. there are lots of people saying it may not be as big a deal as everyone thinks. hopefully the dev hasn't disappeared so we can get this coin going again and on to more exchanges and services.
The threat is likely real, just not common. It seems that a fairly successful version of it was shown to work on AUR. So, its worth updating. I have the code and the patch. I'm just waiting for some consensus to gel amongst the new folks who are stepping in to continue development. I would prefer to see them all sign off on the patch so that it isn't a community of one releasing the fixed wallet.
The original DEV is gone. Don't expect to see them return. But, that is not nearly the end of the world.