Security· ★★★· neutral·

Teku and Besu patch Ethereum validator reward-theft vulnerability

  • —eMudhra intermediate CA keys were generated with insufficient randomness, allowing forged certificates
  • —Java does not check revocation by default, so some Teku Docker setups kept trusting the certificates
  • —Default mainnet Teku nodes are unaffected; operators are urged to move to Java 25
Why it matters: Validators running Docker-based clients must update images to prevent reward theft via address substitution.
#ETH
Source: Bloomingbit
More on this
Security · Oct 22
Litecoin Patches Two Critical Security Vulnerabilities
 Security · Oct 14
MetaMask Staking Flaw Triggers Exit of 16,965 Ethereum Validators
 DeFi · Oct 27
Ethereum Patches Flaw That Let Node Operators Capture Staked ETH