Security· ★★★· bearish·

Critical PHP2Shell flaw threatens crypto exchanges and payment gateways

  • —PHP2Shell vulnerabilities rated 9.2 out of 10 for severity
  • —Cloudflare confirmed exploitation attempts against its customers
  • —PHP-based payment gateways and small exchanges are most exposed
  • —Kraken completed a full PHP-to-Rust backend migration in 2025
Why it matters: Compromised PHP servers at exchanges and payment gateways could leak credentials and put user funds at risk.
Source: BeInCrypto JP
More on this
Security · Oct 9
Core Lightning patches critical security flaws and a Bitcoin payment bug
 Security · yesterday
Ledger CTO warns of critical flaws in PHP, Node.js and TLS certificates
 Security · Oct 14
Wemix moves bug bounty to CertiK Hunt, offers up to $10,000 for critical flaws