$PHP-UP / CVE-2026-109618

Solanagraduated 14d ago
Scanned 21 Oct 2026

The creator holds none now; mint and freeze revoked.

Price–– 24h
Market cap–
Liquidity–
Volume 24h–
Holders–
Top 10 hold–
Dev holds0.0%
Launch block–
Loading the chart…

    ▲ buy · ▼ sell · ● event. Markers show trades by wallets we know something about (D dev, LB launch-block buyer, C crew, K KOL, S smart money, W large trade, TG callout) and what our live watch flagged. Facts, not a verdict. Charts by TradingView.

    Holder concentration

    Top holders mapped by share

    The scan didn't get a holder list for this coin.

    Deepest pools

    Top 5 by liquidity

    No pools found yet: the coin may still be on its launch curve.

    Over time

    Liquidity, holders and market cap

    Recording started: we read this coin every 10 minutes from now on, and the charts fill in over the next hour.

    Money out: we found no trades of this coin from the dev's or the launch-block wallets' token accounts in its first 24 hours (bots that trade through throwaway accounts can hide from this).

    The dev's linked wallets 2

    The dev is one of 2 linked wallets; together they created 18 coins we checked.

    2soh…axXMthis walletcreated 14
    9UoL…xGfVfunded 2soh…axXMcreated 4

    Coins they created: $MOON COIN, $NI, $GULP, $BAKDINU, $Truth, $DOTAI, $PHP, $PHP, $PHP-UP, $NORMIE, $Trencher, $umi

    Linked when one first funded the other, or both bought in the same small launch crew. Busy wallets (exchanges, services) are never used to join wallets.

    The team

    The dev, the wallets that bought the launch block, and holders the dev funded: how they're connected and how their earlier coins did. The launch map below draws the connections.

    1Wallets in the team
    0Connected to the dev
    ·Earlier coins that fell 80%+
    ·Earlier coins that went 2x+
    2soh…axXM dev 13 earlier coins

    Money map

    Loading who funded whom…

    Arrows show money moving (the first money a wallet received) and coins bought or held. Facts from the chain, not a verdict about anyone.

    The creator wallet

    2sohvvgzmcb5Wny59ZonNKmSpkhf64MBfpMEW8hPaxXM

    • Holds 0.00% of the supply and 131.6773 SOL now.
    • Over 1,000 transactions: an active, older wallet.

    Source: GeckoTerminal.

    The creator's other coins

    Creator wallet 2sohvvgzmcb5Wny59ZonNKmSpkhf64MBfpMEW8hPaxXM (from GeckoTerminal). 13 other coins from it in our records: Open the wallet ›

    3 yellow8 red

    $MOON COIN MOONTechSerial launcher: 13 other coins from this dev; website doesn't show this token's address; top 10 hold 100% 29 $0at scan 13d ago $NI Neural inuTechThe dev holds 0.3%, nothing against it on record; tech not tested yet 60 $0at scan 13d ago $GULPTechThe dev sold out, nothing against it on record; tech not tested yet 64 $0at scan 13d ago $BAKDINUNot scanned yet. – $0at scan 13d ago $Truth Truth TokenVampSerial launcher: 13 other coins from this dev; the same X post is linked by 9 other coins we've seen; top 10 h 29 $0at scan 13d ago $DOTAITechThe team's earlier coins: 9 of 9 fell 80%+ within a day; tech not tested yet 29 $0at scan 14d ago $PHP PHP-UP-2026Not scanned yet. – $0at scan 14d ago $PHP PHP-UP-2026TechThe team's earlier coins: 14 of 14 fell 80%+ within a day; tech not tested yet 30 $0at scan 14d ago $NORMIE NormieCoinVampSerial launcher: 13 other coins from this dev; copies the ticker of an older, bigger coin (a vamp) 32 $0at scan 14d ago $TrencherVampThe dev holds 0.0%, nothing against it on record; the same X account is linked by 20 other coins we've seen 59 $0at scan 14d ago $umi yumi umiNarrativeSerial launcher: 13 other coins from this dev; the X account is suspended or doesn't exist 29 $0at scan 14d ago $umi yumi umiNarrativeThe team's earlier coins: 11 of 11 fell 80%+ within a day; the X account is suspended or doesn't exist 27 $0at scan 14d ago $PILL PILL YOUR FRIENDSTechThe dev's record; serial launcher: 13 other coins from this creator 39 $0at scan 14d ago

    At a glance

    • Mint & freezeRevoked
    • Creator holds now0.00%
    • SocialsX

    Facts read from the chain and the coin's own pages. Checked isn't the same as safe.

    Launch map

    The creator in the middle, the wallets that bought in the launch block around it (bigger bubble = bigger share of supply), and the wallets that funded them on the outside. Buyers with the same colour were funded by the same wallet.

    Live activity

    Connecting to the live trades…

    What we're seeing

    • Waiting for trades…

    Latest trades

    Most active wallets (in the trades we've read)

    WalletBoughtSoldNetTrades
    Waiting for trades…

    Trades from GeckoTerminal's public feed, refreshed every few seconds while this page is open. Wallet ages and funders: our own reads of each wallet's first transaction. Flags describe what happened, not why.

    The creator holds none now; mint and freeze revoked.

    Cross-checks

    What we find when we compare the coin's website, code, token, launch timing, liquidity, ticker and wallets against each other and against public address labels.

    • Linked walletsThe dev is one of 2 linked wallets; together they created 18 coins we checked. source
    • The teamThe dev and 0 early buyer/holder wallets; 13 earlier coins together, outcomes still coming in. source
    • The story behind itThe coin's story is an X post by @drilladev (verified) with 37 likes. The post names this coin. 3 other coins we checked use the same post. source
    • Contract permissions (GoPlus)GoPlus finds none of the risky permissions it checks for. source
    • Creator's earlier coinsThis creator launched 13 other coins we checked.
    • Reused X postThe X post x.com/drilladev/status/2112756838517051801 is also listed by 3 other coins we checked: $PHP-UP, $PHP-UP, $PHP-UP. source

    The token

    Mint & freeze revoked

    • Mint new tokens: locked
    • Freeze wallets: locked
    • Change name, logo and links: locked
    Full token report

    The website

    The token's metadata lists no website of its own.

    The story behind it

    @drilladev verified · 37 likes · 11 replies

    THE BIGGEST VUNERABILITY IN WEBSITES HAVE BEEN FOUND. This group just discovered a critical bug in PHP which is used on so many websites that we all use. THEY CAN UPLOAD ANY FILE THEY WANT TO ANY WEBSITE WITH THIS. PHP has two critical bugs (CVE-2026-109618/109619) in its

    The post names this coin. 3 other coins we checked use the same post.

    • Checked isn't the same as safe: these checks describe what the token allows and what the website runs, not what anyone will do.
    • "Nothing found" means not visible on the public page; servers and private code are invisible to us. Not financial advice.