Does the Mt Gox attack constitute theft of Bitcoins or just a Denial-of-Service attack? What's being reported on the news is that millions of Bitcoins were stolen from Mt Gox.  But the Bitcoin Foundation blog says something different:

https://bitcoinfoundation.org/blog/?p=422


  "Somebody (or several somebodies) is taking advantage of the transaction malleability issue and relaying mutated versions of transactions. This is exposing bugs in both the reference implementation and some exchange’s software.
  
  We (core dev team, developers at the exchanges, and even big mining pools) are creating workarounds and fixes right now. This is a denial-of-service attack; whoever is doing this is not stealing coins, but is succeeding in preventing some transactions from confirming. It’s important to note that DoS attacks do not affect people’s bitcoin wallets or funds."


So is the transaction malleability issue Mt Gox is suffering from just a denial-of-service attack, or were Bitcoins actually stolen?

Any help would be greatly appreciated.

Thank You in Advance.
As I understand it (and wrote at more length in this question), the statement is technically correct but incomplete.

The result of a malleable transaction attack is that the targeted transaction (in which the victim voluntarily sent coins to the attacker) does not confirm, but an equivalent transaction with a different ID does confirm.  It is true that this does not steal any coins: the recipient gets the same coins they were already getting.

The theft occurs in the next step, not described in your statement: the attacker points out to the victim that the original transaction didn't confirm, and convinces him to resend the amount, in a new and independent transaction.  If the victim doesn't notice the attacker's equivalent transaction, he might do this; then the attacker has received twice as many coins as he was supposed to.