Is there going to be a report on what this "sophisticated" attack was? From what I can see here there was a changed hash from one of the binaries. So was the download server hacked? Was the coordinator hacked through a central point of failure?

Could this have all been prevented if the clients had more common sense settings? I can't understand from what has been posted already. Anyway it's interesting that the Wasabi team is still delivering patches even after they closed their main revenue source. I'll wait for the post mortem.