On October 22, 2026, Binance and BNB Chain moved quickly to address concerns after a security alert from NSA Cyber warned organizations using PHP to prepare for an update fixing critical vulnerabilities. PHP is widely used in web applications, so the warning drew attention across the crypto industry.
Binance disclosed that it had identified the PHP security vulnerability and implemented proactive safeguards ahead of the official patch release. The exchange said it is closely monitoring developments and strengthening platform integrity to protect users. BNB Chain representative Nina Rong posted a brief statement confirming that BNB Chain does not use PHP in its tech stack, adding: "Stay safe."
PancakeSwap, one of the largest decentralized exchanges on BNB Chain, also confirmed that it does not use PHP anywhere in its technology stack and that user funds are safe. Binance founder Changpeng Zhao shared the PancakeSwap confirmation and said most projects should at least publish a similar statement during a security scare.
The NSA Cyber notice explained that flaws of this kind can give attackers a direct path to a server's file system, creating risk for websites and services running affected code. Users were urged to watch for official updates and be cautious of fake messages claiming to be security fixes.
