We have an official analysis of the attack:

http://www.simplemachines.org/community/index.php?topic=523494.0