CA: Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump
xitter.cf/reale/status/211311800…
Replying to @reale
what doesn't make sense to me is why people are feeding these 3 random larper scammers?!
the one who discovered, disclosed, and fixed should be rewarded not some random wannabe hackers
solana:Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump will flip and come out on top
you can claim rewards from solana:Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump here
pump.fun/coin/Bo61v44TWErCNG…
Over 100 solana ~$10K+ sitting unclaimed for you on pumpfun from #PHP2SHELL
Other people are collecting the creator fees off the work you did via non $PHP2SHELL tokens
Claim → stop them from stealing your spotlight
log into pf with github and claim Creator rewards @lcfr_hax
Replying to @lcfr_hax
Over 100 solana ~$10K+ sitting unclaimed for you on pumpfun from PHP2SHELL
Other people are collecting the creator fees off the work you did via non #PHP2SHELL tokens
Claim → stop them from stealing your spotlight
log into pf with github and claim Creator rewards
۟ retweeted
Replying to @lcfr_hax @0xalpharush
We have 100 SOL waiting for you. Other people are earning fees off what you did - if you claim this $10K+ you’ll put an end to this and earn the fees you deserve brotha
۟ retweeted
He literally has $11,500 USD waiting for him. Hopefully he claims so the other fucks stop getting fees that don’t deserve it
۟ retweeted
Replying to @DegenToDisciple @degengamblah
This is the right one brother! 🫡
@lcfr_hax is the actual guy that discovered the PHP vulnerabilities.
Proof here and fees directed to his GitHub as well: xitter.cf/calif_io/status/211291…
solana:Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump
Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: xitter.cf/lcfr_hax/status/208503…
His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
۟ retweeted
This is the RIGHT one for the whole PHP vulnerability! 🫡
@lcfr_hax is the actual guy that discovered the PHP vulnerabilities.
Proof here and fees directed to his GitHub as well: xitter.cf/calif_io/status/211291…
solana:Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump
Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: xitter.cf/lcfr_hax/status/208503…
His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
۟ retweeted
and don't worry about feeling obligated to post the ca or anything like that, there's literally no obligation unless you would like to support this project and continue to run it and earn the rewards from trading volume
there's no shame in being rewarded for your hard work
۟ retweeted
in case you don't know how to claim your rewards @lcfr_hax
download the pumpfun app
create a new wallet
find "link socials" where you can auth your github
you will then be able to claim the rewards directly from people trading Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump
I think it's fair to say that @lcfr_hax should be paid for making everyone aware of this monumental security event
and he did it ethically as well
big onboarding moment for pumpfun
he's crypto native. pumpfun trading rewards from $PHP2SHELL just paid his bug bounty.
People were doubting whether @lcfr_hax GitHub was real.
Here’s the official proof straight from the PHP project
the account linked to the coin is listed as a Reporter on the CVE-2026-109618 advisory (the main PHP2Shell RCE).
Confirmed.
People were doubting whether @lcfr_hax GitHub was real.
Here’s the official proof straight from the PHP project
the account linked to the coin is listed as a Reporter on the CVE-2026-109618 advisory (the main PHP2Shell RCE).
Confirmed.
Replying to @swarminged @lcfr_hax
Viral confirmation from one of the most respected in the industry @calif_io “@lcfr_hax was the first to discover php2shell and develop a working exploit… His work convinced the PHP Foundation to invest in fixing this entire bug class.”
xitter.cf/calif_io/status/211291…
People were doubting whether @lcfr_hax GitHub was real.
Here’s the official proof straight from the PHP project
the account linked to the coin is listed as a Reporter on the CVE-2026-109618 advisory (the main PHP2Shell RCE).
Confirmed.
Replying to @swarminged @lcfr_hax
Viral confirmation from one of the most respected in the industry @calif_io “@lcfr_hax was the first to discover php2shell and develop a working exploit… His work convinced the PHP Foundation to invest in fixing this entire bug class.”
xitter.cf/calif_io/status/211291…














