Changpeng Zhao, founder of Binance, warned users on X today, October 21, 2026, to be cautious online due to recently disclosed vulnerabilities in PHP, a widely used web programming language. Zhao posted, "Call me paranoid, but be extra careful visiting ANY web site in the next few days, as some web admins are not always up-to-date with security patches. Two vulnerabilities (CVE-2026-109618 and CVE-2026-109619) reported for PHP, the web programming language, affecting servers running popular apps like WordPress and Magento, with patches released October 21, 2026 after details leaked early. Exploitation was confirmed in the wild soon after disclosure, prompting quick WAF protections and patching by IT teams, as unauthenticated attacks could turn visited sites into vectors for credential theft or device exploits. Stay SAFU!"
The warning comes as the digital asset space has seen significant activity, with Bitcoin recently trading above $80,000, as reported in our coverage on corporate BTC treasuries. David Gokhshtein also stated Bitcoin is back to $84,000. Despite these gains, security remains paramount, with reports on Bitcoin-backed loans highlighting the need for robust protections. The Crypto Fear & Greed Index currently sits at 63, indicating 'Greed,' suggesting a heightened period of market enthusiasm where users might be less vigilant.
Zhao’s statement implies that users should exercise extreme caution and verify the security of any websites they visit, particularly those handling sensitive information like cryptocurrency wallets or financial transactions. His advice to "Stay SAFU!" (Safe Asset Fund for Users, a term originating from Binance's insurance fund) underscores the potential for credential theft or device exploits, urging users to remain vigilant against unauthenticated attacks that could leverage these vulnerabilities.
