Hi,
Thanks for the bug report Simon, "responsible" disclosure on public forums is always appreciated. We're working with ShapeShift to make sure we can protect them appropriately against this specific attack in the future. As "Me" and Adrian advised, I would also encourage you return the funds.
Regarding Peter's accusations on Twitter/Reddit/listserve, we have no idea why we are his target. He has never met with our CEO, has no idea of our business model, nor our company objectives. All his comments about us are his speculations. I'm sure Peter knows what a Sybil attack actually is and making such claims on a public forum is completely unfounded and uncalled for. Stretching definitions beyond the point where they make sense is a common rhetoric and political tool, not necessarily appropriate in a professional or technical context.
We offer useful services for many startups like ourselves. We are good actors in this space. As a startup we are also constrained by limited resources (we're funded but far from larger companies resources). Companies aren't built in a single day and we hope to do more to help decentralization in the future as well. We're trying to further the ecosystem with our small team, so the pot shots are puzzling.
Thanks,
Matthieu