Also, it should be noted that the most recent example of this attack was apparently not an attack, rather it was probably a software problem - although this should have already been detected during testing on the testnet, so I'm not sure how "unknown" it could have been.
The problem was their software discarding shares that matched 2^32-1 difficulty or better. Anything UNDER that, they worked fine. So testnet would not have detected anything wrong.