I know what is the problem. It would be tricky to fix. They strore the form key and form key hash in the session, based on bunch of fields and the parent ID of the last post (silly). Therefore, the form key hash is going to be valid only for the last post in flat mode.
Not sure how easy it would be to solve this.
