RabbitHole (app.rabbithole.gg) issued a statement reassuring users that their safety and the security of their assets remain priorities, after parts of the internet experienced disruption over the prior 48 hours from a critical security issue affecting widely used web infrastructure. The reference is to PHP2Shell (CVE-2026-109618 and CVE-2026-109619), two critical remote code execution flaws in PHP core that leaked before patching and prompted websites and services worldwide to take precautionary measures, including temporary shutdowns for emergency updates.
RabbitHole said it is continuing to monitor developments and maintain strict security standards across the platform. It closed with "Your funds are safe!"
RabbitHole