跳到正文
ENTITY PROFILE / 实体档案

eMudhra

RSS

eMudhra, an Indian certificate issuer, issued forged certificates after a key compromise discovered in mid‑October 2026. The flaw enabled forged certificates that could impersonate services such as Stripe’s API and caused some Ethereum clients running Teku or Besu to trust forged certificates, potentially redirecting ETH rewards. Default mainnet nodes remained unaffected. Security mitigations included Mozilla, Chrome, Apple, and Microsoft blocking the compromised certificates; Apple blocked them on 19 Oct 2026 and Microsoft on 20 Oct 2026. Private keys were recovered by Scott Helme and others, identifying eight compromised intermediate certificates (emSign Root CA – G1, G2, G3 and AAA Certificate Services). The incident prompted an investigation and temporary suspension of Ledger hardware sales in several countries, but the affected Ethereum setups were patched promptly.· Graphiti 生成的实体摘要

RELATIONS
33关系
CURRENT
32当前有效
EVENTS
4相关事件
REPORTS
6来源报道
KNOWLEDGE ATLAS0 个实体 · 0 条关系
暂无可公开的邻近关系
按需展开实体的全部已公开关系，保留探索过的节点与连线。

关系变化

按生效时间
  1. eMudhraIMPACTEDEthereum

    eMudhra caused a security failure that impacted Ethereum

    当前有效1 条来源Ethereum
  2. eMudhraLEFT TRUSTING FORGED CERTIFICATESTeku

    eMudhra left some Teku setups trusting forged certificates

    当前有效1 条来源Teku
  3. eMudhraLEFT TRUSTING FORGED CERTIFICATESBesu 26.9.0

    eMudhra left some Besu setups trusting forged certificates

    当前有效1 条来源Besu 26.9.0
  4. Charles GuillemetREPORTED COMPROMISE OFeMudhra

    Charles Guillemet reported the compromise of eight intermediate certificates belonging to eMudhra

    当前有效1 条来源Charles Guillemet
  5. MicrosoftBLOCKED CERTIFICATES ISSUED BYeMudhra

    Microsoft blocked eight vulnerable certificates issued by eMudhra.

    当前有效1 条来源Microsoft
  6. GoogleBLOCKED CERTIFICATES ISSUED BYeMudhra

    Google blocked eight vulnerable certificates issued by eMudhra.

    当前有效1 条来源Google
  7. CertiKALERTS ABOUTeMudhra

    CertiK alerts that crypto trading bots and exchange applications may remain exposed to the eMudhra certificate flaw because browser fixes may not protect all software.

    当前有效1 条来源CertiK
  8. AppleBLOCKED CERTIFICATES ISSUED BYeMudhra

    Apple blocked eight vulnerable certificates issued by eMudhra.

    当前有效1 条来源Apple
  9. MicrosoftBLOCKED CERTIFICATES OFeMudhra

    Microsoft platforms blocked the eMudhra Limited certificates

    当前有效2 条来源Microsoft
  10. FirefoxBLOCKED CERTIFICATES OFeMudhra

    Mozilla Firefox blocked the eMudhra Limited certificates using OneCRL

    当前有效1 条来源Firefox
  11. AppleBLOCKED CERTIFICATES OFeMudhra

    Apple devices blocked the eMudhra Limited certificates

    当前有效1 条来源Apple
  12. The RegisterREPORTS ONeMudhra

    The Register reported that eMudhra issued over 60 million certificates

    当前有效1 条来源The Register
  13. CyberleekREFERENCE TOeMudhra

    Mozilla’s Official Security Bulletin references eMudhra’s compromised keys

    当前有效1 条来源Cyberleek
  14. Cyber Security NewsREPORTS ONeMudhra

    Cyber Security News reported on eMudhra’s key compromise

    当前有效1 条来源Cyber Security News
  15. Scott HelmeIDENTIFIED SECRET KEYS FOReMudhra

    Scott Helme identified that eMudhra’s secret keys were compromised

    当前有效1 条来源Scott Helme
  16. Scott HelmeWROTE ABOUT PRIVATE KEYS FOReMudhra

    Scott Helme wrote that eMudhra’s private keys were tiny integers

    当前有效1 条来源Scott Helme
  17. ChromeBLOCKED CERTIFICATES FOReMudhra

    Google Chrome blocked eMudhra’s compromised certificates the same day as the report

    当前有效2 条来源Chrome
  18. EasyABLOCKED CERTIFICATES FOReMudhra

    Microsoft blocked eMudhra’s compromised certificates on October 20, 2026

    当前有效1 条来源EasyA
  19. MozillaBLOCKED CERTIFICATES FOReMudhra

    Mozilla blocked eMudhra’s compromised certificates

    当前有效1 条来源Mozilla
  20. WayneIDENTIFIED KEY COMPROMISE ATeMudhra

    Wayne identified that eMudhra had a key compromise

    当前有效1 条来源Wayne
  21. e-Conomy SEABLOCKED CERTIFICATES FOReMudhra

    Apple blocked eMudhra’s compromised certificates on October 19, 2026

    当前有效1 条来源e-Conomy SEA
  22. Scott HelmeRECOVERED KEYS FROMeMudhra

    Scott Helme recovered all eight compromised keys from eMudhra

    当前有效1 条来源Scott Helme
  23. eMudhraCAN FORGE CERTIFICATES FORStripe

    eMudhra can forge certificates that could impersonate Stripe's API

    当前有效1 条来源Stripe
  24. CoinDeskCONTACTEDeMudhra

    CoinDesk contacted eMudhra for comment on the key compromise

    当前有效2 条来源CoinDesk
  25. MozillaRECOVERED PRIVATE KEYS OFeMudhra

    Mozilla independently recovered the private keys of eMudhra Limited

    当前有效1 条来源Mozilla
  26. AppleBLOCKED CERTIFICATES FROMeMudhra

    Apple blocked eMudhra's certificates

    当前有效1 条来源Apple
  27. MozillaBLOCKED CERTIFICATES FROMeMudhra

    Mozilla blocked eMudhra's certificates

    已失效 2026-10-211 条来源Mozilla
  28. WayneREPORTED SECURITY FLAW FOReMudhra

    Wayne reported a security flaw involving eMudhra

    当前有效1 条来源Wayne
  29. ChromeBLOCKED CERTIFICATES FROMeMudhra

    Chrome blocked eMudhra's certificates

    当前有效1 条来源Chrome
  30. eMudhraCOMPROMISES CERTIFICATE ROOTAAA Certificate Services

    eMudhra compromised AAA Certificate Services

    当前有效1 条来源AAA Certificate Services
  31. eMudhraCOMPROMISES CERTIFICATE ROOTemSign Root CA – G1

    eMudhra compromised emSign Root CA – G1

    当前有效1 条来源emSign Root CA – G1
  32. eMudhraCOMPROMISES CERTIFICATE ROOTemSign ECC Root CA – G3

    eMudhra compromised emSign ECC Root CA – G3

    当前有效1 条来源emSign ECC Root CA – G3
  33. eMudhraCOMPROMISES CERTIFICATE ROOTemSign Root CA – G2

    eMudhra compromised emSign Root CA – G2

    当前有效1 条来源emSign Root CA – G2

关系是 Graphiti 从报道中提取的事实陈述，不是原文引述；失效时间表示后来的报道显示这条关系已不成立。

相关事件 4

来源报道 6