Source on the bounty: http://www.reddit.com/r/Bitcoin/comments/1nmdq4/bitcointalk_hacked/ccjyjti http://www.reddit.com/r/Bitcoin/comments/1nmdq4/bitcointalk_...

Source on the bounty: http://www.reddit.com/r/Bitcoin/comments/1nmdq4/bitcointalk_hacked/ccjyjti http://www.reddit.com/r/Bitcoin/comments/1nmdq4/bitcointalk_... also with an update: Update: It's unfortunately worse than I thought. There's a good chance that the attacker(s) could have executed arbitrary PHP code and therefore could have accessed the database, but I'm not sure yet how difficult this would be. I'm sending out a mass mailing to all Forum users about this. Personally I suspect that it's due to misconfigured nginx which allows uploaded files to be executed, a user in #bitcoin demonstrated they could upload a PHP file using an exploit in the avatar uploading system, although theymos did have someone looking at the nginx configurations about 6 hours ago and hasn't mentioned finding anything.