# Source: Cảnh báo từ sàn giao dịch crypto: Lỗ hổng PHP nghiêm trọng đe dọa các trang thanh toán

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

BeInCrypto Việt Nam: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Cảnh báo từ sàn giao dịch crypto: Lỗ hổng PHP nghiêm trọng đe dọa các trang thanh toán

**BeInCrypto Việt Nam** · [https://vn.beincrypto.com/crypto-exchange-hack-alert-php2shell-risk/](https://vn.beincrypto.com/crypto-exchange-hack-alert-php2shell-risk/) · published 2026-10-21T22:42:38Z · added by `curator@php.newsroom` · slug `vn-beincrypto-crypto-exchange-hack-alert-php2shell-ris`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261024T160544Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). BeInCrypto Vietnam (Vietnamese): the Vietnamese edition of the BeInCrypto crypto-exchange warning recorded as nl-beincrypto-crypto-exchange-hack-waars...

## What it says, as the collector read it

#### Cảnh báo từ sàn giao dịch crypto: Lỗ hổng PHP nghiêm trọng đe dọa các trang thanh toán

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `vn/news/vn-beincrypto/crypto-exchange-hack-alert-php2shell-risk`, snapshot `20261024T160544Z`. Copied byte for byte; every file's sha256 is in `captures/20261024T160544Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

BeInCrypto Vietnam (Vietnamese): the Vietnamese edition of the BeInCrypto crypto-exchange warning recorded as nl-beincrypto-crypto-exchange-hack-waarschuwing-php2sh. It quotes the same CZ tweet and SlowMist's post, and states that this is only an assessment of possible exposure and that there is no authenticated evidence that the named payment units or large exchanges were attacked through PHP2Shell. The claim is recorded on the Dutch edition.

> Hiện chưa có bằng chứng xác thực rằng những đơn vị thanh toán hoặc sàn lớn kể trên đã bị tấn công do PHP2Shell.

_Curator's translation:_ "There is currently no authenticated evidence that the payment units or large exchanges named above were attacked through PHP2Shell."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Cảnh báo từ sàn giao dịch crypto: Lỗ hổng PHP nghiêm trọng đe dọa các trang thanh toán". Selected mechanically, not read by a person.

#### Capture notes

Language `vi`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261024T160544Z · HTTP 200 · https://vn.beincrypto.com/crypto-exchange-hack-alert-php2shell-risk/- `headers.json` 0103b58478fae72921ab4a517a77d21d732cc96c250f2c007702db77a91392fd 3,084 bytes
- `page.html` a2ba7882f18df6489f14cb186ff6f8da945edbdb3201da289727988a6ebaacc3 512,646 bytes
- `provenance.json` 982124d347e0e4cdca839aa81ed3fef4ec32d946907ebe2d32d95ede7e2367d9 1,747 bytes
- `rendered.html` 46a9d70b78062c1ef7b5623de768f6f40576a30c03512bd885c362177a83b02d 491,926 bytes
- `screenshot.jpg` 5d21f8c02c5e991628022404be7154616505c9e33a40bbb704b631354752525a 470,833 bytes
- `text.txt` 66a22f6ffada68b916b4b5bd8ad21071a5effa1e9945996d1d67fd5034e3196b 10,403 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.45 · data as of 2026-10-27T09:43Z · vault commit 55b47c4d6af1 · https://refs.php.oct.2026.newsroom.sgit.ai/sources/vn-beincrypto-crypto-exchange-hack-alert-php2shell-ris/index.html