Mark Karpelès? Wow that's a name I haven't thought about since 2014.

To be honest that clueless individual and its pathetically lame security practices made him lose 800 000 Bitcoin belonging to its customers with Mt Gox, which was written in... PHP.

And he went to prison for a few years for it. So he knows something about PHP exploits.