According to CoinMeta, PHP Foundation admitted that due to hesitant decision-making and insufficient resources, the repair work for a critical security vulnerability first identified in 2024 was delayed multiple times, and this delay was characterized as a "structural mistake." PHP has released emergency patches for two key vulnerabilities, which unauthorized attackers could exploit to execute code on affected servers. Some government websites in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline to install these patches. Security companies Calif and OpenAI reported the same underlying issue on August 11th, and Calif demonstrated unconditional remote code execution. Blockchain security firm SlowMist investigated the usage of PHP in the crypto industry and found that 793 out of 1,488 domain names had direct PHP fingerprints. Coinbase stated that no affected PHP instances were found, while BitGo claimed that its platform was not impacted. Co-founder of Binance, Changpeng Zhao, warned users to be more cautious when accessing websites recently, and OpenAI has released tools to check for vulnerable PHP versions of Codex.