Security Vulnerability in Decentralized Ethereum Exchange

If some HN people are interested in etherdelta's integrity, I created recently a chrome extension that checks etherdelta's main html & js files for changes (using md5 hashes). You can check the github page https://github.com/paxpelus/etherdelta-guard

Author here. Would love the community's security skills to investigate and diagnose the vulnerability in more depth. Can provide additional information via PM.