Source: PANews ↗
以太坊客户端Teku和Besu修复证书漏洞，防止攻击者窃取ETH奖励
Translation unavailable. Please try again.
What the source reports
PANews 10月29日消息，据CoinDesk报道，以太坊客户端Teku发布26.10.3版本、Besu发布26.10.2版本，均在Docker镜像中停止信任与印度证书机构eMudhra相关的证书。此前研究人员发现，由于密码学缺陷，eMudhra八个中间证书机构的私钥可被推算。Teku表示，攻击者若位于验证者与其连接服务之间，可冒充该服务，被欺骗的验证者可能提出将费用支付给攻击者地址的区块，而伪造外部签名者风险最高。Teku称主网默认节点不受影响，未报告漏洞利用。直接运行而未使用Docker的运营商需自行更新Java，仍使用Java 26的用户需迁移至Java 25，该版本已停止维护。
Read the original report on PANews ↗Live market context
Market figures are live reference data, not evidence that this report caused a price movement. Not financial advice.
Related news
Open news desk →Ethereum Heads for Worst October Since 2018 as Early Whales Wake Up
Ethereum (ETH) is losing support from new money and old money at the same time this October. US spot ETFs have shed about $1.35 billion, while wallets dormant for years moved over $140 million in ETH. The price has dropped 13.6% this month so far. That puts Ethereum on course for its weakest October since The post Ethereum Heads for Worst October Since 2018 as Early Whales Wake Up appeared first o...
Ethereum clients patch flaw that could redirect ETH rewards
Ethereum client developers Teku and Besu have released security updates to address a certificate vulnerability that could allow attackers to impersonate services used by validators and potentially redirect their block rewards. According to security advisories accompanying the releases, the issue…
Stellar launches cross-chain messaging with ethereum through VIA Labs
Stellar adds cross-chain messaging through VIA Labs, connecting Soroban and Ethereum smart contracts for stablecoin transfers and tokenized asset applications.