Bitcoin hacking challenge finally falls as researcher proves critical PHP flaw is exploitable