The Steal My Bitcoin challenge server was breached less than three hours after an accessible PHP page was added. Researcher @killa published a proof of concept; the operator confirmed the breach, citing server logs. via @hardeyjumoh