Big Tech’s eMudhra fixes may leave crypto bots exposed, CertiK warns
Summary
Google, Apple and Microsoft blocked eight vulnerable eMudhra certificates, but crypto trading bots and exchange apps may remain exposed if they rely on separate security systems that do not receive browser revocation protections. CertiK warned that attackers could use compromised certificates to impersonate exchanges, wallet interfaces or APIs, potentially replacing deposit addresses or inducing malicious transaction approvals. Exploitation would also require intercepting or redirecting users’ internet traffic; the certificates alone do not reveal wallet private keys. Crypto operators should update software and certificate trust stores and confirm affected certificates are rejected.
