It wasn't exploited because half the internet shut down until it was fixed. Someone put up a site called "steal my bitcoin" with a vulnerable version of PHP and their bitcoin private key on the same server. It was hacked within two hours (of actually enabling PHP on the server) by someone with an AI agent.