I think this is good that you react quickly but we need to change some things:

• it is very hard to know which app was hacked. Taking random accounts that downvoted @haejin, there were 3 apps in commons: utopian, busy, dlive.
• the documentation of steemconnect should be update with secure tips. I am referring to the fact that you store the access tokens while this is apparently not required.

All in all, I am very happy the harm was limited. Utopian is very important for a lot of people and should be secured accordingly.