Could you run them off by just always displaying success for any sane-looking small value donation, without leaking the result from your payment processor?
Alternately (or in addition to this), you could rate-limit form submissions from the same address.
