Security update from $LISTA:
They don't run PHP anywhere in their stack. Zero exposure to the PHP2Shell vulns (CVE-2026-109618/109619) that dropped this week.
Protocol = fully on-chain via audited contracts
Web infra = not PHP-based
User funds, data, services → all safe.
Good reminder: check what your favorite protocols actually run on. Not all infra is created equal.
They don't run PHP anywhere in their stack. Zero exposure to the PHP2Shell vulns (CVE-2026-109618/109619) that dropped this week.
Protocol = fully on-chain via audited contracts
Web infra = not PHP-based
User funds, data, services → all safe.
Good reminder: check what your favorite protocols actually run on. Not all infra is created equal.