Big Tech’s eMudhra fixes may leave crypto bots exposed, CertiK warns
This story deserves to be shared
Send it to someone who'd care, or post it on your networks.
Cryptocurrency trading bots and exchange applications may remain exposed to the eMudhra certificate security flaw despite emergency fixes from major technology companies, according to blockchain security company CertiK. By Tuesday, tech giants including Google, Apple and Microsoft had blocked eight vulnerable certificates issued by India’s eMudhra, but the fixes may not protect crypto applications using separate security systems, CertiK’s senior director of digital assets security, Peiyu Wang, told Cointelegraph. “Major browser blocks substantially reduce the risk for clients that receive and enforce them,” Wang said. “Some applications outside the browser ecosystem do not enforce Certificate Transparency or receive the same revocation protections.”Wang stressed that crypto services are not inherently more susceptible to the flaw than other industries, but attackers could exploit compromised certificates to impersonate the HTTPS connections used by exchanges, wallet interfaces and APIs. Attackers could specifically impersonate crypto services and replace deposit addresses or trick users into approving malicious transactions, Wang said.
This article is an excerpt. To read the full content, visit the original source. Cointelegraph
Related articles
Tech giants rush to block 8 eMudhra certs that could enable fake sites
Tech giants have deployed emergency blocks against eight vulnerable digital certificates that could allow attackers to impersonate legitimate websites. By Tuesday, browser developers and other major technology companies had deployed protections against eight intermediate certificates issued by India-based certificate authority eMudhra Limited after discovering that their private keys were insufficiently secure. Mozilla cryptography engineer Dennis Jackson wrote in an incident report that Mozilla independently recovered the private keys when it first received notice of the flaw on Saturday, confirming that the key-generation process was “flawed” and “trivial to exploit.” An attacker who intercepts a user’s connection could use fraudulent certificates to impersonate a legitimate website and potentially read or alter the information exchanged, according to Mozilla. While many companies quickly blocked the affected certificates, the threat remains for applications and systems that don’t receive those blocks automatically.
Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’ - The Register
Massive clean-up job under way because this mess makes it possible to impersonate any website or service Tragically simple private keys used by a certification authority based in India have been compromised, meaning the 60-million-plus certs it has issued can’t be trusted and necessitating a massive clean-up job. The CA of concern in this case is called eMudhra, which boasts of having issued over 60 million digital certificates to help usher in a world of digital trust. The company has instead panicked the world.
Polymarket traders see a 10% chance the AI bubble bursts before New Year’s Day
For investors worried that the runaway artificial-intelligence trade might be about to hit the skids, prediction markets are already starting to reflect that anxiety.
Public-sector pension board forms joint venture with Nuveen to invest in U.S. shopping centres
Partnership starting with $790-million portfolio
How a16z-backed DATA is rethinking its blockchain strategy after $30 million Sui deal
Updated Oct 21, 2026, 11:24 a.m. EDTPublished Oct 21, 2026, 11:22 a.m. EDT4 min readDATA CEO Andrea Muttoni (Source: DATA)SummaryDATA shifted from its broad intellectual property ambitions to AI training data after finding that established licensing markets were difficult to disrupt, CEO Andrea Muttoni told CoinDesk. The startup is moving to Sui following a $30 million investment from Sui Foundation, allowing the company to focus on its data verification tools rather than maintaining its own blockchain. DATA's Trace registry tracks the origins, consent terms and licensing history of AI training data, with partner Kled adding millions of contributions each day. DATA, the blockchain startup backed by Andreessen Horowitz's a16z crypto and formerly known as Story Protocol, is shutting down its blockchain and moving to Sui after securing a $30 million investment from the network's foundation. The move comes after spending years trying to bring intellectual property onchain. But after raising $140 million and building its own blockchain, the company found that changing how the world's intellectual property is licensed was harder than expected.
Bitcoin price tags $84.6K as US stocks head higher on SpaceX Q3 earnings beat
Bitcoin (BTC) passed $84,000 after Wednesday’s Wall Street open as US stocks added to gains on more strong corporate earnings reports. Key points:Bitcoin climbed nearly 2% on Wednesday to return to $84,600 for the first time since Oct. 7. SpaceX Q3 operating revenue beat expectations by nearly 15%, coming in at $14.6 billion. BTC price action needs a daily close above $83,400 to shift the focus higher in its trading range, crypto analyst Rekt Capital wrote. SpaceX Q3 earnings help propel Bitcoin to $84,600Data from TradingView showed BTC/USD gaining nearly 2% on the day as markets reacted to a significant Q3 earnings beat from SpaceX. BTC/USD one-day chart. Source: Cointelegraph/TradingViewAfter the market close on Tuesday, SpaceX reported a Q3 revenue of $14.6 billion, up 161% year-on-year and beating expectations by nearly 15%. The net income of the company was $4.4 billion for the quarter. “The combination of our launch leadership, recurring Starlink revenue, and the significant expansion of our SI infrastructure continues to drive meaningful operating leverage,” chief financial officer Bret Johnsen commented on the earnings release.
0 comments
No comments yet. Be the first to share your thoughts!