Security experts at SlowMist have issued an urgent wake up call to the cryptocurrency industry, warning that several high profile technical gaps are leaving digital assets exposed. The alarm centers largely on two critical PHP vulnerabilities that are already being targeted by hackers. These specific flaws allow unauthorized users to execute malicious code directly on servers, creating a dangerous open door for anyone looking to breach crypto exchanges, decentralized finance platforms, and digital wallet providers.

Because these exploits carry such a severe risk rating, developers are being urged to update their systems immediately. While patches were released recently in updated versions of PHP, many platforms often lag behind in implementation, providing a window of opportunity for cybercriminals. This vulnerability is particularly worrying because it does not require an attacker to be authenticated, meaning they do not need account access or passwords to begin compromising a server’s integrity.

Beyond the immediate threat from PHP, the broader ecosystem is grappling with additional instability involving LiteLLM backdoors and various bugs within Next.js frameworks. Together, these issues represent a multifaceted attack surface that could lead to catastrophic fund losses if left unchecked. For an industry built on the promise of immutable security and trustless transactions, these recurring coding errors serve as a stark reminder that the underlying software infrastructure remains a primary point of failure.