In the early hours of October 22, Binance founder CZ reminded users on X: Be extra cautious when visiting any website over the next few days. Two critical vulnerabilities have been disclosed in the PHP language (CVE-2026-109618 and CVE-2026-109619). Unpatched servers could be remotely controlled, putting a large number of websites around the world at risk. The issue is commonly known in the industry as PHP2Shell.

The Binance ecosystem soon issued a united response: PancakeSwap said its tech stack does not use PHP at any stage, its platform is unaffected, and funds are safe. BNB Chain said its core infrastructure does not use PHP and the network is unaffected. Binance said it had deployed safeguards and completed remediation before the official patch was released. CZ also reposted PancakeSwap’s post, saying that most projects should at least publish a confirmation.

In the markets, $BNB was trading at around $734 and $CAKE at around $2.16. The vulnerability targets website servers, not on-chain assets themselves. However, phishing sites often impersonate official sites during incidents like this, so stick to verified entry points and don’t click unfamiliar links.

#BNB #CAKE #行情 does not constitute investment advice