# Source: Crypto-exchange waarschuwing: kritieke PHP-kwetsbaarheid brengt betaalwebsites in gevaar

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

BeInCrypto: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Crypto-exchange waarschuwing: kritieke PHP-kwetsbaarheid brengt betaalwebsites in gevaar

**BeInCrypto** · [https://nl.beincrypto.com/crypto-exchange-hack-waarschuwing-php2shell-risico/](https://nl.beincrypto.com/crypto-exchange-hack-waarschuwing-php2shell-risico/) · published 2026-10-21T22:42:38Z · added by `curator@php.newsroom` · slug `nl-beincrypto-crypto-exchange-hack-waarschuwing-php2sh`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261024T133450Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). BeInCrypto Nederland (Dutch), 21 October, by Mohammad Shahid. It explains that the PHP2Shell patches (score 9.2) matter to crypto users, particularly...

## What it says, as the collector read it

#### Crypto-exchange waarschuwing: kritieke PHP-kwetsbaarheid brengt betaalwebsites in gevaar

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `nl/news/nl-beincrypto/crypto-exchange-hack-waarschuwing-php2shell-risico`, snapshot `20261024T133450Z`. Copied byte for byte; every file's sha256 is in `captures/20261024T133450Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

BeInCrypto Nederland (Dutch), 21 October, by Mohammad Shahid. It explains that the PHP2Shell patches (score 9.2) matter to crypto users, particularly small exchanges and payment services built on PHP, says Cloudflare has confirmed attackers already tried to exploit the flaws against its customers and that several European government sites went offline as a precaution, and quotes Wiz Research that a successful attack could expose passwords, authentication tokens and API keys. It lists categories it considers at risk (PHP payment gateways, smaller exchanges, DeFi and wallet front-ends) and says SlowMist's MistEye scanned PHP assets across the crypto industry. It states that no confirmed evidence shows the named services or major exchanges were hacked.

> Er is geen bevestigd bewijs dat de genoemde betaaldiensten of grote exchanges daadwerkelijk via PHP2Shell gehackt zijn.

_Curator's translation:_ "There is no confirmed evidence that the named payment services or major exchanges were actually hacked via PHP2Shell."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T171501Z, not necessarily this one):_ BeInCrypto (NL) Cloudflare bot challenge; no text.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Crypto-exchange waarschuwing: kritieke PHP-kwetsbaarheid brengt betaalwebsites in gevaar". Selected mechanically, not read by a person.

#### Capture notes

Language `nl`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261024T133450Z · HTTP 200 · https://nl.beincrypto.com/crypto-exchange-hack-waarschuwing-php2shell-risico/- `headers.json` c5177f36cf9b1233bc511eeacc3d4ecc792f7c5ee787dde0ac9ebfd74c4e2bc2 3,096 bytes
- `page.html` 2cf4bda1d5bc4b7895bb5d12c0a263a2432d798d3dbbf077ab56b711a911cb00 488,805 bytes
- `provenance.json` 5dbfac167e17ab7aafc76bfbbd66c03a007c14d06d7ec7476f2e07b9bc8391ba 1,765 bytes
- `rendered.html` 290c8329420a512959a1c4689c865a4c8c24305ece57b3c5323b8d4c132a9090 414,582 bytes
- `screenshot.jpg` 3bd51559d901f26237bf28c5960bccfd5b8d4c533f761ba3e581274c7ef91740 448,751 bytes
- `text.txt` 6829ef8bd0166b88fffce8734030327bee8cc3a9d976f61af96a2b8195fffdb8 8,058 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/nl-beincrypto-crypto-exchange-hack-waarschuwing-php2sh/index.html