Unless SHA-256 broke or someone solved the discrete log problem while I was asleep, the protocol is fine. Usually, "compromised" is just code for "Wall Street is here." It’s a feature, not a bug.