PHP Vulnerability: Crypto Platforms Confirm No Exposure
A critical PHP vulnerability disclosure this week prompted rapid public statements from Trust Wallet and CoinMarketCap — both confirmed their platforms do not run on PHP and that users are unaffected.
What we know
@cz_binance amplified Trust Wallet's statement that their apps and core infrastructure are not built on PHP, requiring no user action. He also RTs @cz_binance CoinMarketCap's similar clearance. The coordinated public communications suggest the PHP vulnerability was significant enough to warrant proactive reassurance across the ecosystem.
How the story developed
A critical PHP vulnerability disclosure this week prompted rapid public statements from Trust Wallet and CoinMarketCap — both confirmed their platforms do not run on PHP and that users are unaffected.
India's CoinDCX faces another suspected breach of ~$16M in USDT, with ZachXBT separately alleging that $15.8M in user deposits remained unaccounted for via a compromised address active for 10 months after the exchange's July 2025 incident.
Three crypto security stories broke simultaneously: Binance quietly patched a PHP vulnerability, India's CoinDCX may have lost $16M in a new breach, and Polkadot's Fearless Wallet exposed private keys since February 2025.
Sources
“Trust Wallet: not built on PHP, users unaffected, no action required”
View post →“CoinMarketCap: platform and API do not run on PHP, user accounts unaffected”
View post →By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.