Unattributed: Smart-contract vulnerability

Cloudflare’s Matthew Prince said the network saw thousands of exploit attempts even before the PHP vulnerability was publicly disclosed.

Evidence boundary

Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.

Sources

• https://cointelegraph.com/news/cloudflare-millions-exploit-attempts-php-vulnerability-disclosure
• https://thedefiant.io/news/security/cloudflare-ceo-reports-millions-of-php2shell-exploit-attempts

Record history

First seen: 2026-10-22T03:39:17.000Z. Last updated: 2026-10-22T10:35:10.342Z. Revision: 1.