Story signal · how it spread on X · via Elfa

as of
Spread
i
Distinct X and Telegram accounts Elfa counted behind this story’s reports, summed over the thread. Not posts, not impressions.
173 accounts

2 reports
first post
Leviathan +31.9 h later

NET reaction
i
Price change from the first post to 24 hours later (Hyperliquid). BTC over the same window is shown so a market-wide move is not mistaken for a reaction to this story. Not advice.
+5.3% 24h after post

$295.54 → $311.18
BTC +1.4% same window

Thread · 3 events · last update 22 Oct 05:53
  1. First reportTwo critical PHP remote-code-execution vulnerabilities disclosed; patches pending155 acc.
  2. ReactionCZ warns users to avoid unpatched websites after critical PHP vulnerabilities disclosed15 acc.
  3. UpdateCloudflare sees millions of exploit attempts after critical PHP vulnerability disclosure3 acc.
  4. Leviathan published this article

All times UTC.

Cited posts

  • @CryptoastMedia CryptoastFirst reportOn X ↗

    🚨 Alerte sécurité : 2 failles critiques dans PHP L'équipe de sécurité de PHP prépare un correctif urgent pour deux vulnérabilités critiques notées 9,2 sur 10. Le patch sera publié aujourd'hui à 16h00, heure de Paris. Selon le CERT-EU, l'agence de cybersécurité des institutions…

  • @SlowMist_Team SlowMistOn X ↗

    🚨 SlowMist TI Alert: Two Critical PHP Remote Code Execution (RCE) Vulnerabilities Disclosed 🚨 🔴 Severity: Critical 📌 CVEs: CVE-2026-109618, CVE-2026-109619 ⚠️ CVSS v4.0: 9.2 for both vulnerabilities 🛠️ Patch Status: Official patches pending On October 20, 2026, PHP… https://t.co/JF0fe7SJmq

  • @TheProjectUnity Jay AndersonOn X ↗

    🚨BREAKING This Is A Genuinely Serious Cybersecurity Emergency! 70% of Websites Are at MAJOR Risk! [Critical Severity Rating: 9.2/10 under CVSS v4.0.] I’ve confirmed that the warning is authentic. The NSA published it today, 21 October 2026, on its official website. More…

Show 3 more cited posts
  • @BigOsCrypt Big◎sOn X ↗

    If you run a website then pay attention to this. Two critical vulnerabilities have been found in PHP that could let attackers execute code on vulnerable servers without logging in. This includes potentially affected WordPress sites. (All ye Wordpress users) Update your PHP… https://t.co/7TG1UmyFcf

  • @LuizaJarovsky Luiza Jarovsky, PhDOn X ↗

    🚨 AI has discovered major PHP vulnerabilities, and they have been leaked. Attackers could exploit these vulnerabilities. If your systems run PHP, take these actions NOW: ***Recommendations of the UK National Cyber Security Center - Identify systems running PHP across your…

  • @seth_fin SethOn X ↗

    Be careful browsing around right now. PHP just shipped emergency patches for two critical bugs CVE-2026-109618 and CVE-2026-109619 Unauthenticated remote code execution on servers running PHP Affects a huge chunk of the web If you run a site update now https://t.co/re4TX8lYCK

167 more accounts posted about this · 1 Telegram channel (no public link)

TradersTrader calls tracked by Elfa · not advice

Positioning · NET

Open89 open positions · 87 long · 2 short

Tracked accounts lean long about 97% of the time, so a long-heavy book is normal, not a signal. As of 22 Oct 02:41 UTC.

Reaction since the first post

Since 21 Oct 01:54 UTC7 calls opened · 7 long · 0 short

Callers with a scored record

@AlwaysBeThinkin long · entry $307.37alpha +0.058 · 71% hit rate · 21 scored
@Nebraskangooner long · entry $311.47alpha −0.133 · 49% hit rate · 94 scored
@WheelieInvestor long · entry $307.37alpha −0.173 · 47% hit rate · 72 scored

Alpha, hit rate and sample size exactly as Elfa reports them.

Whole equity market, not this story

Crowding0th percentile · vs last 28 days, 50 typical
Pulse 24h73/100 · unusualness of new calls, 0–100, 50 typical, higher means more long than usual
Book93.1% long · 2,952 accounts

As of 22 Oct 09:50 UTC.

Social-monitoring data, not investment advice Elfa prices Hyperliquid post text from Xas of

Explore the topic

Loading related coverage…

Explore the full feed

Comments

Loading comments…