...presuming folks were required to view the source code before using it, or that they do. Most folks, even pool ops, just hurry up and compile to keep their systems from accumulating downtime. There have been numerous opensource exploits not caught until after damage has been done. While this wasn't implemented, it's very odd to not have some description there.
Look at it this way, nobody to date has caught it. Imagine how many hundreds of thousands of potcoin could've been skimmed/stolen? Only 1 individual out of the userbase noticed this?
This is so true...as a pool op I recall going as far as quickly reviewing the code (most don't); seeing that part and thinking "that's odd" but noticed it was commented out. I moved on since I was in a rush to compile.