Not sure why this is something that is particularly the worry of developers. Such havoc can be wreaked through simple phishing at the user-level. Even at major organizations, two-factor or OAuth authentication may not be the standard, meaning that a market-changing Tweet is just one well-crafted email away. That seems like by far the easiest attack vector for a hacker.