Security Update
We would like to reassure our community that all user funds, data, and services remain completely unaffected by the PHP2Shell vulnerabilities (CVE-2026-109618/109619) that were disclosed this week.
To provide some technical context, the Lista protocol operates completely on-chain through audited smart contracts. Furthermore, our web infrastructure is not constructed with PHP. Since Lista does not use PHP at all, these recent security issues have no impact on our platform.
We would like to reassure our community that all user funds, data, and services remain completely unaffected by the PHP2Shell vulnerabilities (CVE-2026-109618/109619) that were disclosed this week.
To provide some technical context, the Lista protocol operates completely on-chain through audited smart contracts. Furthermore, our web infrastructure is not constructed with PHP. Since Lista does not use PHP at all, these recent security issues have no impact on our platform.