Crypto Apps May Still Trust Eight Blocked eMudhra Certificates

Crypto trading bots and exchange apps may still accept compromised eMudhra certificates even after browser makers blocked eight of them, leaving some users exposed when apps use separate security systems. Google, Apple and Microsoft have blocked eight certificates issued by eMudhra, an Indian digital certificate authority. CertiK warned that browser protections may not reach software relying on its own certificate checks instead of browser trust settings. Peiyu Wang, CertiK's senior director of digital asset security, said attackers could use compromised certificates to imitate an exchange, wallet interface or application programming interface (API).

Source: TokenPost