A researcher known online as Killa breached the Steal My Bitcoin challenge server on October 25 and extracted a private key less than three hours after its PHP configuration was changed. The attack succeeded after challenge operator James Pavur made a PHP page accessible, a setup criticized by security specialists as an unrealistic test of the vulnerability. The challenge followed the October 21 disclosure of two critical flaws, CVE-2026-109618 and CVE-2026-109619, which were reported to allow remote code execution. Evidence published on GitHub documented a server response containing a private key, but does not establish that an autonomous artificial intelligence system carried out the attack.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
