Hacking News
Website Invites Hackers to Steal Bitcoin
A website invites hackers to steal $2,000 worth of Bitcoin by exploiting a vulnerable PHP installation. The challenge, which started around $500, remains unclaimed after more than 17 hours online. Participants must restrict their attacks to the web application and PHP container, and attacking the underlying host is forbidden. The website advertises PHP 8.4.26, which has two critical security flaws (CVE-2026-109618 and CVE-2026-109619) that can potentially permit remote code execution.