CertiK: Cryptographic applications still face eMudhra certificate vulnerability risks

According to Cointelegraph, blockchain security company CertiK stated that although Google, Apple, and Microsoft have blocked 8 affected certificates issued by the Indian digital certificate authority eMudhra, cryptocurrency trading bots and exchange applications may still be exposed to related vulnerability risks, and browser fixes may not cover software that uses independent security systems.

Peiyu Wang, Senior Director of Digital Asset Security at CertiK, pointed out that attackers could exploit the compromised certificates to impersonate exchanges, wallet interfaces, and APIs, replace deposit addresses, or induce users to approve malicious transactions. However, such attacks also require intercepting or redirecting network traffic, and the compromised certificate authority keys alone cannot expose wallet private keys. Cryptocurrency service operators should update software and certificate trust stores and ensure that applications reject affected certificates.