We still waiting for a public explanation on why Gavin announced this prematurely and then subsequently and allegedly claimed he was hacked {Or was that just a over-reaction from the Core devs?}
...
He pretty much explained what happened.
He got duped. Maybe he didn't put enough effort to make sure he wasn't being tricked by CSW, as he was sure that CSW would make the signature public anyway, if that was the case CSW wouldn't have any reason to pull any tricks on him.
The 'hacking concern' was made up by Core devs to revoke Gavin's commit access, apparently they refused to reinstate it even when it turned out Gavin wasn't hacked. Just taking advantage of the situation I guess.