The number of developers working on Bitcoin Unlimited and Bitcoin Classic is relatively small, and the
code that included the exploited
vulnerability was merged
after being reviewed by only one person — not a lot for security - critical
code protecting people's money.