Press Enter to search · ESC to close

Crypto Regulation

CertiK warns crypto apps still exposed to eMudhra certificate flaw

CertiK warned that crypto trading bots and exchange apps may remain exposed to vulnerabilities tied to eight certificates issued by Indian certificate authority eMudhra, even after Google, Apple and Microsoft blocked them, since browser fixes may not cover software using independent security systems. Peiyu Wang, CertiK’s senior director of digital asset security, said attackers could use the compromised certificates to impersonate exchanges, wallet interfaces and APIs and swap deposit addresses, though such attacks also require intercepting or redirecting network traffic.

Original source

AI take

The exposure here is structural: OS-level certificate blocks don't propagate to every piece of software that maintains its own trust store, so trading bots and exchange apps can remain a soft target even after the major platforms act. The realistic threat is address-swapping through impersonated exchange and wallet interfaces, but it hinges on traffic interception or redirection, which narrows the practical attack surface. What matters is whether independent software vendors and bot operators actually rotate or distrust the affected certificates, since that remediation sits outside the browser vendors' reach.

Generated by AI for reference only.

Share

Related News

TREE NEWS share card
Long-press image above → Save to Photos / Share
Pitch us Feedback