A high-severity remote code execution vulnerability has been discovered in PHP, putting crypto exchanges on alert: Binance says it completed protective measures and fixes before the official patch was released.

It began when the MIIT’s NVDB issued a risk alert about a high-severity PHP RCE vulnerability. Binance said on X that its security team had implemented protective measures in advance and completed the necessary fixes after the vulnerability was disclosed. BNB Chain, meanwhile, stated plainly that its technology stack does not use PHP.

For everyday users, infrastructure vulnerabilities like this are more concerning than price swings: 1) Trading platforms, wallets, and API services could be exposed if they use PHP; 2) Consider rotating your exchange API keys, changing any reused passwords, and checking that 2FA is enabled; 3) Phishing links disguised as “official patches” or “security upgrades” are especially common during a vulnerability window—don’t click on them.

Next, watch for two things: which other platforms confirm they’re affected, and how quickly the official patch is rolled out.

#CryptoSecurity #BTC #ETH