I think the attack looks like, two transactions at the same time, one sending to exchange or merchant, one sending elsewhere (back to owner). Keep orphan chain open long enough for merchant to send goods or exchange to payout. Then release orphan chain and have it "snap back" to a world in which you received something but didn't have to pay for it.
https://unhashed.com/cryptocurrency-news/five-successful-51-...