You guys should have realised that this project is full of FUD, when this advertisement agency marketed an animated mobile miner as "revolutionary" (yeah, probably in 3D deception).
This security issue, nonetheless, is probably going to carry on until the project is dead and forgotten, before the company comes up with some excuse to exit the game with your investments.
If you can, dump now. If you purchased the ICO, I'm sorry for your loss.