If there's a hole, then they'll fix it in the next release. That's how these projects go. Lots of thought put into the design, lots of verification, and lots of testing; repeat forever.
However, considering how little information is given on their website, not to mention their distrust of all current protocols, I'm not so sure that they're for real. Their beta release was supposed to have been finished almost a year ago, but there aren't any indications of it (no "download" page), and this also leads me to believe that they haven't updated their website in at least a year either.