CROWDFUNDINSIDER · 2026-10-30 00:54 UTC

Ethereum (ETH) Clients Teku and Besu Remove Trust in Compromised eMudhra Certificates to Protect Validator Connections

Ethereum's Teku and Besu clients released updates removing trust in compromised eMudhra certificate roots after researchers recovered private keys from eight intermediate authorities generated with insufficient randomness. The vulnerability could allow attackers intercepting network traffic to impersonate HTTPS services used by validators and potentially redirect block rewards or obtain signatures. No exploitation has been reported; exposure only affects nodes configured with HTTPS endpoints, and Docker users should update to new images while binary distribution users must update their Java…

Loading the story on Tree News…