This wasn't a PoS vulnerability.. it was an attack on the exchange, an exchange vulnerability... read the doc released by the devs.