Trust Wallet Shuts Down Speculation Over PHP Exploit Fallout

The largest players in the Web3 market have conducted a coordinated campaign to inform investors amid a large-scale internet security crisis. Today, the team behind the Trust Wallet crypto wallet put an end to the growing speculation, officially declaring the complete security of its infrastructure in the face of the critical PHP Shell vulnerability and the potential consequences of this incident. The day before, on October 21, the U.S. National Security Agency (NSA Cyber) issued an emergency warning for organizations using PHP. Two critical flaws were discovered in the core of the language, CVE-2026-109618 and CVE-2026-109619, allowing hackers to execute arbitrary code on a server remotely and without authentication (unauthenticated RCE).