do you know how you were compromised? putting the same code back up might just let the hacker back in...

Can you share what happened?  Might be useful for others.

ozcoin uses drupal 7 function user_hash_password:
http://api.drupal.org/api/drupal/includes!password.inc/function/user_hash_password/7

Drupal 7 use SHA512 by default with a salt. It runs the hash through PHP's hash function numerous times to increase the computation cost of generating a password's final hash (a security technique called stretching).

Main server is back up but in "maintainance mode"
Cached shares are being counted at the moment
a bit more to do before we can make the site live
getting close though
Best wishes
Graet

Website back online 
webserver has had a clean install on new HDDs old HDDs still under forensic investigation
The pool forum and some other drupal modules disabled - we are looking forward to a new front end soon
Still some finishing up to do
eustratum mining node was where the exploit started, code has been changed and that node is offline until reinstalled.

I missed some emails during the downtime - if I have not responded, please resend, thanks

Hopefully there will be more good news within 24hours

I am amazed and even overwhelmed at times by the offers of help and the many ways people have contacted me with messages of support. Please know every one of you has made a difference, even if I have not been able to thank you personally. I feel humbled but more determined than ever to continue my involvement in Bitcoin, get Ozcoin back on a good footing and see where this amazing experiment takes us next

Best wishes and thanks all
Graeme

Not for me.

https://ozcoin.net/

Is there an incantation which should be used other than that?

Batman forgot to do the https:// fixing it right now
and fixed

Fantastic the pool is getting back up.
Hopefully you were able to tackle this issue, so this doesn't reoccur up.

I will change my miners back to your pool when I get back from work.

I noticed in the payout screen, the "unsuccessful payout" (to the hacker) is still listed as payout.
Is this going to be corrected/send out later again?

Yep, expect that.

Here's some data. Just in case it is useful.

If you wish need, I'll PM you the account name.
Although I doubt this is an anomaly specific to me.

Just trying to help work through the transition effects.

I don't think you would be out of line to suggest to just give it a day and see if it settles out. I'm merely reporting what I see now.

"DGM
Round Credit*:
0.00000982 BTC
Unconfirmed Credit:
0.03981841 BTC"

"232427   2013-04-19 14:56:14   1,490   0.00293916   0.00000000   0.00000197   Completed"