I don't think they were vulnerable to that particular exploit. I know someone who ran the Metasploit Rails XML/YAML vulnerability scanner against Twitter.com almost immediately after its released, suspecting that they might be vulnerable. They were not.