COINDESK · 2026-10-29 05:30 UTC

Ethereum clients patch flaw that could let attackers redirect ETH rewards

Ethereum clients Teku and Besu patched a vulnerability where attackers could redirect validator block rewards using compromised certificates from Indian certificate authority eMudhra. eMudhra's private keys for eight intermediate certificate authorities were generated with insufficient randomness, allowing attackers to forge certificates that unpatched software would accept. A validator exploited this way could have its block fees redirected to an attacker's address; no exploitation has been reported and default mainnet nodes are unaffected.

Loading the story on Tree News…