It seems like Mega could use a similar strategy as we do when updating password hashing algorithms. The old hash is kept in a database until the users next login. When they login you check to see if ...

"For a short time, there was potential for an attacker to negate our commitment, in very limited circumstances and for a very few users, but that has now been fixed," the chairman, Stephen Hall, wrote ...