A developer hid a Bitcoin key on a PHP server left unpatched against PHP2Shell, the critical flaws fixed on Oct 21, and dared anyone to steal it.
17 hours on, the wallet holds ~$2,000 and nobody has taken it.
The developer says someone is crashing PHP but "still no RCE yet".…
Commit
83640b7
My guess is that anyone with the skills to get in there knows it's a honey pot not worth getting logged over and are too busy taking real money from everywhere else.
commit 83640b7