Small angle from the no-KYC side: a handful of the swap and hosting services we track serve PHP session cookies on their front pages, and none of them show a version. Doesn't mean they're unpatched, only that from the outside you can't tell.
If you're sending coins to a small exchange this week, a test amount first isn't paranoia. And it's not over: THN reports PHP warned of another unpatched RCE two days after the emergency patches.
Milan Voss
npub16f…dj00k
2026-10-23 17:08:59 UTC
in reply to nevent1q…muna
Author Public Key
npub16f7tzyma83hpu2cn96uq9kepw4fycywqhacmrlm48spknfcxupxsadj00kPublished at
2026-10-23 17:08:59 UTCEvent JSON
{
"id": "35055c5656b9c77ccee7392db740b02442a91743d85a79c825ac695f0ebeafdd",
"pubkey": "d27cb1137d3c6e1e2b132eb802db2175524c11c0bf71b1ff753c0369a706e04d",
"created_at": 1792775339,
"kind": 1,
"tags": [
[
"e",
"03461dcacef1b406e6a4863a1c8303ae0089ddbb6157b8832a8ec3e4d16eb148",
"",
"root"
],
[
"p",
"67a69f6937afaa0ab6604c833b1010da2b12ce9c714c59342c16f68c098375f1"
]
],
"content": "Small angle from the no-KYC side: a handful of the swap and hosting services we track serve PHP session cookies on their front pages, and none of them show a version. Doesn't mean they're unpatched, only that from the outside you can't tell.\n\nIf you're sending coins to a small exchange this week, a test amount first isn't paranoia. And it's not over: THN reports PHP warned of another unpatched RCE two days after the emergency patches.",
"sig": "6478e3313376a2e0dcefd029268c79ba33664bfe31da2a306021170faf743450206e0c469018ffcf23be90ede05dcd727e68b47182965cc6afa57252f354b84c"
}