Thank you for your attention! As I mentioned, it was impossible to implement all the functionality so fast, so there's a todo list in GitHub, and penalty for fast redemption is one of them.  

What about the fact, initializing contract with fake nominators, I just checked the code but saw no problems. Pool contract is initialized once, all addresses of nominators are written with initialization message, the same with nominators. There's no need all nominator contracts were deployed from the start, so if someone decide to deploy nominator's contract instaed of pool owner, yes he can do , but there's no meaning in this, since address preset in pool contract already contains nominators address. Am I getting something wrong? 
The main idea is bulletproof link between contracts so even owner cannot change any piece of code, so if this issue really exists, it is critical. 

What about basechain, I believe this is the subject for discussion.