CertiK Warns Crypto Apps Still Face eMudhra Certificate Vulnerability Risks

Odaily reports: Blockchain security firm CertiK stated that although Google, Apple, and Microsoft have blocked 8 affected certificates issued by Indian digital certificate authority eMudhra, crypto trading bots and exchange applications may still be exposed to related vulnerability risks, as browser remediation measures may not cover software that uses independent security systems.

Peiyu Wang, Senior Director of Digital Asset Security at CertiK, noted that attackers could exploit compromised certificates to impersonate exchanges, wallet interfaces, and APIs, replace deposit addresses, or trick users into approving malicious transactions. However, such attacks would also require intercepting or redirecting network traffic, and the compromised certificate authority keys alone cannot expose wallet private keys. Crypto service operators should update their software and certificate trust stores, and confirm that their applications reject the affected certificates. (Cointelegraph)