Researchers exploit PHP vulnerability to crack the "Steal My Bitcoin" challenge

A researcher successfully cracked the "Steal My Bitcoin" challenge using a PHP vulnerability.

The prize for the challenge was 0.02511679 BTC. However, the challenge operators later discovered that the server had saved the wrong wallet key, and ultimately had to manually transfer the prize to the researcher.