HashCash

Recently two spam comments got through, blacklist didn’t nail them because the content was the random testing messages they use to probe (a random line of characters and no link).

Do we know how they are getting around hashcash?