CertiK: Crypto applications still face eMudhra certificate vulnerability risks

Blockchain security company CertiK stated that although Google, Apple, and Microsoft have blocked 8 affected certificates issued by the Indian digital certificate authority eMudhra, cryptocurrency trading bots and exchange applications may still be exposed to related vulnerability risks, and browser fixes may not cover software that uses independent security systems.

Peiyu Wang, Senior Director of Digital Asset Security at CertiK, pointed out that attackers could exploit the compromised certificates to impersonate exchanges, wallet interfaces, and APIs, replace deposit addresses, or induce users to approve malicious transactions. However, related attacks also require intercepting or redirecting network traffic; the compromised certificate authority's keys alone cannot expose wallet private keys. Cryptocurrency service operators should update software and certificate trust stores and ensure applications reject affected certificates.