Ethereum software teams have published updates to address exposure tied to compromised certificate-authority keys from eMudhra. Teku 26.10.3 is recommended, while Besu 26.10.2 removes affected trust roots from its Docker images. A compromised authority may allow remote services to be impersonated in certain configurations, although no flaw in Ethereum’s consensus rules has been reported. Operators must check their Java runtime and deployment method because updating the blockchain client alone may not repair the surrounding environment. The episode highlights for ETH markets an operational and supply-chain risk separate from the protocol itself, with no evidence so far of a successful exploit against Teku nodes on the mainnet.
Source: Read the original article
