Teku and Besu Patch eMudhra Certificate Risk That Could Redirect Validator Rewards
Photo: Crypto Economy
Teku and Besu released security updates after compromised eMudhra certificate-authority keys left Ethereum node configurations exposed to forged HTTPS connections. Teku’s release notes recommend version 26.10.3, which removes trust for four affected certificate roots from Docker images, while Besu released version 26.10.2. The updates address certificate trust at the software-distribution layer rather than a flaw in Ethereum’s consensus rules. Default Teku mainnet nodes were not affected, keeping the incident distinct from vulnerabilities in the Ethereum protocol. Researchers found that private keys for eight eMudhra intermediate certificate authorities could be recovered because they were generated with insufficient randomness.
Source: Crypto Economy
