They fucked up their encryption so it has half the entropy they claim, they verify messages solely based on information from the message and their pseudo-tor thing isn't encrypted. Also you can drain someone's battery by sending them specially crafted messages