Researcher Wins Roughly $2,000 Bitcoin Bounty in PHP2Shell Security Challenge

Security researcher killa has claimed an approximately $2,000 Bitcoin prize after successfully exploiting a vulnerable test server in the 'Steal My Bitcoin' challenge. Challenge creator cloudlandsdev confirmed the exploit and transferred the funds manually after discovering a mismatched private key had been placed on the server. The challenge launched on October 24 to test two critical PHP vulnerabilities known as PHP2Shell, each carrying a 9.2 severity rating. The prize wallet grew from 0.00625104 BTC to roughly 0.025 BTC, remaining unclaimed until an executable PHP endpoint was deployed on October 25.