eMudhra Certificate Flaw Hits Ethereum Teku and Besu Nodes, Developers Rush Fixes

A serious security lapse at Indian certificate authority eMudhra has forced Ethereum developers to issue emergency updates for the Teku and Besu client software. The flaw allowed forged certificates to be trusted by certain node configurations, potentially enabling man-in-the-middle attacks. While default mainnet nodes were not exposed, customized setups that relied on eMudhra certificates were vulnerable. The incident underscores the critical role of certificate authorities in blockchain infrastructure and the risks of centralized trust points. Developers have released patches to revoke the compromised certificates and are urging node operators to update immediately. This event highlights the need for robust certificate management and the importance of rapid response in the blockchain ecosystem. As Ethereum continues to evolve, such security challenges may shape future approaches to node authentication and trust models.