Ethereum Developers Rush Out Fixes After Security Breach at Indian Certificate Firm
Key Highlights: Flaws in Java’s default certificate revocation checks exposed Ethereum clients Teku and Besu to man-in-the-middle risks via compromised website certificates. Attackers impersonating services or external key signers could manipulate validator reward addresses or propose blocks that divert fees. Consensys Diligence identified the vulnerability; standard mainnet Teku nodes remain unaffected, and no active exploits ...