enc.apool.pl is not listed, so no clue what you are talking about. Yes, it does suck for all of those miners, as well as the coin. The pool was contacted multiple times and given the same notice as everyone else. The designation of "official" was just intended to to steer miners towards it. Most of you haven't been around very long or you would know that, for quite some time there was only one pool. We had to give a bounty to get more pools online at that time. The designation has been removed for all pools. I have never had a special arrangement or affiliation with ANY pool.

Now, to answer the question, the KGW vulnerability is fixed (meaning it is no longer used). It was replaced by DigiShield when the hard fork occurred.