Joined May 2026
۟ retweeted
CA: Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump xitter.cf/reale/status/211311800…
Replying to @reale
what doesn't make sense to me is why people are feeding these 3 random larper scammers?! the one who discovered, disclosed, and fixed should be rewarded not some random wannabe hackers solana:Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump will flip and come out on top
3
6
15
۟ retweeted
Over 100 solana ~$10K+ sitting unclaimed for you on pumpfun from #PHP2SHELL Other people are collecting the creator fees off the work you did via non $PHP2SHELL tokens Claim → stop them from stealing your spotlight log into pf with github and claim Creator rewards @lcfr_hax
1
4
8
85
۟ retweeted
Replying to @lcfr_hax
Over 100 solana ~$10K+ sitting unclaimed for you on pumpfun from PHP2SHELL Other people are collecting the creator fees off the work you did via non #PHP2SHELL tokens Claim → stop them from stealing your spotlight log into pf with github and claim Creator rewards
3
4
8
23
We have 100 SOL waiting for you. Other people are earning fees off what you did - if you claim this $10K+ you’ll put an end to this and earn the fees you deserve brotha
1
1
2
19
He literally has $11,500 USD waiting for him. Hopefully he claims so the other fucks stop getting fees that don’t deserve it
1
1
1
19
This is the right one brother! 🫡 @lcfr_hax is the actual guy that discovered the PHP vulnerabilities. Proof here and fees directed to his GitHub as well: xitter.cf/calif_io/status/211291… solana:Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: xitter.cf/lcfr_hax/status/208503… His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
16
13
1
31
887
This is the RIGHT one for the whole PHP vulnerability! 🫡 @lcfr_hax is the actual guy that discovered the PHP vulnerabilities. Proof here and fees directed to his GitHub as well: xitter.cf/calif_io/status/211291… solana:Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump
Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: xitter.cf/lcfr_hax/status/208503… His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.
2
6
10
477
#PHP2Shell Everything you need to know can be found here.
1
1
278
what doesn't make sense to me is why people are feeding these 3 random larper scammers?! the one who discovered, disclosed, and fixed should be rewarded not some random wannabe hackers solana:Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump will flip and come out on top
1
1
1
3
51
all rewards should be sent to @lcfr_hax
1
15
and don't worry about feeling obligated to post the ca or anything like that, there's literally no obligation unless you would like to support this project and continue to run it and earn the rewards from trading volume there's no shame in being rewarded for your hard work
1
1
3
15
in case you don't know how to claim your rewards @lcfr_hax download the pumpfun app create a new wallet find "link socials" where you can auth your github you will then be able to claim the rewards directly from people trading Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump
1
1
3
9
Replying to @reale @lcfr_hax
Ethical disclosure getting rewarded is exactly the kind of onboarding story crypto needs more of.
1
1
3
23
I think it's fair to say that @lcfr_hax should be paid for making everyone aware of this monumental security event and he did it ethically as well big onboarding moment for pumpfun he's crypto native. pumpfun trading rewards from $PHP2SHELL just paid his bug bounty.
People were doubting whether @lcfr_hax GitHub was real. Here’s the official proof straight from the PHP project the account linked to the coin is listed as a Reporter on the CVE-2026-109618 advisory (the main PHP2Shell RCE). Confirmed.
2
4
200
Bo61v44TWErCNGF4qzu2nEWyGgPWeNrNpu1FsV8dpump
1
108
۟ retweeted
People were doubting whether @lcfr_hax GitHub was real. Here’s the official proof straight from the PHP project the account linked to the coin is listed as a Reporter on the CVE-2026-109618 advisory (the main PHP2Shell RCE). Confirmed.
Viral confirmation from one of the most respected in the industry @calif_io “@lcfr_hax was the first to discover php2shell and develop a working exploit… His work convinced the PHP Foundation to invest in fixing this entire bug class.” xitter.cf/calif_io/status/211291…
1
1
3
366
People were doubting whether @lcfr_hax GitHub was real. Here’s the official proof straight from the PHP project the account linked to the coin is listed as a Reporter on the CVE-2026-109618 advisory (the main PHP2Shell RCE). Confirmed.
Viral confirmation from one of the most respected in the industry @calif_io “@lcfr_hax was the first to discover php2shell and develop a working exploit… His work convinced the PHP Foundation to invest in fixing this entire bug class.” xitter.cf/calif_io/status/211291…
1
1
3
366