PANews
PANews|10月 29, 2026 05:41
[Ethereum Clients Teku and Besu Fix Certificate Vulnerability to Prevent Attackers from Stealing ETH Rewards] According to CoinDesk, Ethereum clients Teku released version 26.10.3 and Besu released version 26.10.2, both of which stop trusting certificates associated with the Indian certificate authority eMudhra in their Docker images. Researchers previously discovered that due to a cryptographic flaw, the private keys of eMudhra's eight intermediate certificate authorities could be deduced. Teku stated that an attacker positioned between a validator and its connection service could impersonate the service, potentially leading to a deceived validator requesting payment to the attacker's address for a block. Forging external signers poses the highest risk. Teku stated that the default mainnet node is unaffected and no exploits have been reported. Operators running directly without Docker need to update their Java; users still using Java 26 need to migrate to Java 25, which is no longer maintained.
+3
Mentioned
Share To

Timeline

HotFlash

APP

X

Telegram

Facebook

Reddit

CopyLink

Hot Reads