Also, there have been suggestions that the NSA has a backdoor for the secp256r1 curve.
As for bitcoin being fucked if it ever were to ever need a new hashing algo, I'm not sure. I would imagine that several forks would come out of it as a result, and one or more would likely have a fair amount of success. Only time will tell.