I think some of us were expecting it T_T (Possible Xmas hill exploit + rollback)

There is a check for normal shops, just not the flakes store although it is sent via the same packet header.
It goes something like that :

I know there's a check for the normal shops, however you'd think they'd take everything in the code, and just duplicate it except for flakes instead.
If they were smart, the entire shop program would use a constant for the currency type, then they only need to change it once.
IE normally it's Mesos, and it's defined as something like CURRENCY = MESOS (Or something to that effect, I don't know how they programmed it), so when they change the entire system for this one event, they just change CURRENCY into either Blue or Golden Flakes, and it does the check like normal.
Oh wait... "If they were smart".