A South Korean security professor says two critical PHP flaws could turn an ordinary web-server breach at a crypto exchange into a customer-asset problem. Hwang Suk-jin, a professor at Dongguk University’s International Graduate School of Information Security, gave the warning to Seoul Economic Daily on October 25, 2026, as the PHP2Shell vulnerabilities kept operators scrambling to patch.