There's now a confirmation on that attack in the next client release.