It's interesting to note that, although in this case the HTTPS certificate presented by the attackers wasn't valid, they may have been able to acquire an apparently legitimate certificate if the misrouting's effect extended to the infrastructure of a certificate authority.
It's fascinating to watch cryptocurrency go through many of the same pitfalls that early banking went through. It seems like many of the problems crypto faces could be solved by opening a history book.