Hacker News Reader

But wouldn't that be evident very, very quickly, from just looking at a relevant account's audit log, and shut down right away?

But it was shut down right away...

I think it only stopped in the last few minutes. It lasted hours

I also think the exploit wasn't stopped, they just stopped all verified accounts from tweeting.