Wow. Well I would claim surprise but this is a bitcoin project... so...
Also, simple injection is hardly a "0-day" exploit. The fact that you guys had completely unsanitized input on your forums software means you're every bit as responsible for the hack.