Yep, if you saw the attack done it was really easy to replicate it as all transactions are public. In fact, it's a testament to the poor technical capability o

Yep, if you saw the attack done it was really easy to replicate it as all transactions are public. In fact, it's a testament to the poor technical capability of most people involved in Ethereum that the whitehat was even able to do this, in any other environment you'd have had other blackhats clean out the remaining $90m within minutes, all it took was to fire up a web3 console (ethereum's javascript interface) and call the initWallet method with your own address on it. Then you could drain the contract at will.