I forgot to mention this earlier, but better late than never - Panic has updated Transmit to version 3.5.6 to combat a large vulnerability. The patched vulnerability dealt with an "exploitable heap-based buffer overflow condition". You can download the update at the usual place.