$PHP (PHP-UP-2026)

Finney · 2026-10-22

The token has surged to a $1.6M market cap as the three vulnerability researchers claimed a total of over 503 SOL in creator fees directly from the on-chain contract.

Up 133% from its $442K–$687K base to trade at $1.6M with no new consolidation floor established yet.

What changed: Holders grew from 3,649 to 4,266 and researchers claimed an additional 124 SOL in fees since the last read.

What happened

• 2026-10-22: The three vulnerability researchers claimed their respective shares of the creator fees, totaling over 503 SOL in successful on-chain transactions.
• 2026-10-22: Vulnerability researchers claimed their respective shares of the creator fees, totaling over 436 SOL in successful on-chain transactions.
• 2026-10-21: The three vulnerability researchers claimed their respective shares of the creator fees, totaling over 379 SOL in successful on-chain transactions.
• 2026-10-21: Three vulnerability researchers claimed their respective shares of the creator fees, totaling over 379 SOL in successful on-chain transactions.
• 2026-10-21: The project updated its website to confirm the cached-pointer exploit chain is dead at addref and the real bug is a CVSS 5.3 serialize-state cross-request UAF [jackalsyn.com].
• 2026-10-21: The project updated its website with corrected findings, noting the cached-pointer chain is dead at addref and the real bug is a serialize-state cross-request UAF [jackalsyn.com].
• 2026-10-21: The project updated its website to confirm the cached-pointer exploit chain is dead at addref and the real bug is a CVSS 5.3 serialize-state cross-request UAF.
• 2026-10-21: The project updated its website with corrected findings, noting the cached-pointer chain is dead at addref and the real bug is a serialize-state cross-request UAF.