Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
Crypto-exchange waarschuwing: kritieke PHP-kwetsbaarheid brengt betaalwebsites in gevaar
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261024T133450Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). BeInCrypto Nederland (Dutch), 21 October, by Mohammad Shahid. It explains that the PHP2Shell patches (score 9.2) matter to crypto users, particularly...
What it says, as the collector read it
Crypto-exchange waarschuwing: kritieke PHP-kwetsbaarheid brengt betaalwebsites in gevaar
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page nl/news/nl-beincrypto/crypto-exchange-hack-waarschuwing-php2shell-risico, snapshot 20261024T133450Z. Copied byte for byte; every file's sha256 is in captures/20261024T133450Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
BeInCrypto Nederland (Dutch), 21 October, by Mohammad Shahid. It explains that the PHP2Shell patches (score 9.2) matter to crypto users, particularly small exchanges and payment services built on PHP, says Cloudflare has confirmed attackers already tried to exploit the flaws against its customers and that several European government sites went offline as a precaution, and quotes Wiz Research that a successful attack could expose passwords, authentication tokens and API keys. It lists categories it considers at risk (PHP payment gateways, smaller exchanges, DeFi and wallet front-ends) and says SlowMist's MistEye scanned PHP assets across the crypto industry. It states that no confirmed evidence shows the named services or major exchanges were hacked.
> Er is geen bevestigd bewijs dat de genoemde betaaldiensten of grote exchanges daadwerkelijk via PHP2Shell gehackt zijn.
_Curator's translation:_ "There is no confirmed evidence that the named payment services or major exchanges were actually hacked via PHP2Shell."
_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T171501Z, not necessarily this one):_ BeInCrypto (NL) Cloudflare bot challenge; no text.
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Crypto-exchange waarschuwing: kritieke PHP-kwetsbaarheid brengt betaalwebsites in gevaar". Selected mechanically, not read by a person.
Capture notes
Language nl. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261024T133450Z · HTTP 200 · https://nl.beincrypto.com/crypto-exchange-hack-waarschuwing-php2shell-risico/
headers.jsonc5177f36cf9b1233bc511eeacc3d4ecc792f7c5ee787dde0ac9ebfd74c4e2bc2 3,096 bytespage.html2cf4bda1d5bc4b7895bb5d12c0a263a2432d798d3dbbf077ab56b711a911cb00 488,805 bytesprovenance.json5dbfac167e17ab7aafc76bfbbd66c03a007c14d06d7ec7476f2e07b9bc8391ba 1,765 bytesrendered.html290c8329420a512959a1c4689c865a4c8c24305ece57b3c5323b8d4c132a9090 414,582 bytesscreenshot.jpg3bd51559d901f26237bf28c5960bccfd5b8d4c533f761ba3e581274c7ef91740 448,751 bytestext.txt6829ef8bd0166b88fffce8734030327bee8cc3a9d976f61af96a2b8195fffdb8 8,058 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →