Sometimes the only way to discover a vulnerability is after somebody exploits it. Not an easy lesson to learn, but valuable nonetheless.