1) globalny downtime scentralizowanego systemu (ponad 50h)
"In October, the Coordinator, a special node currently securing the network during its infancy, was taken offline temporarily after a potential security vulnerability was identified."
2) insecure by default
"IOTA private keys must not be used more than once to create a digital signature"
"Despite the IOTA team’s best efforts to educate the community on safe practices, a substantial number of people misused their private keys and became potential victims of token theft"
3) centralny freeze środków użytkowników

"we decided [...] to effectively "freeze" users funds"
"frozen funds may be reclaimed by their original owners upon proof of ownership"
To jest oficjalny tekst IOTA Foundation - nic nowego, tylko podsumowane fuckupów przez samą Fundację.