Edit: the vulnerabilities mentioned below were all implementation-dependent; the protocol appears to be fine.

I haven't been following Matrix development too closely, but last I heard, both the protocol and the reference implementation had serious flaws, including gaping security holes. As in, issues that couldn't be overcome without a clean-slate redesign. Did they somehow manage to salvage something useable?