Ethereum validators, take note! A critical security flaw has just been patched in Teku and Besu that could steal your ETH transaction fees. Attackers could spoof services and redirect rewards to their wallets.
The issue lies in insecure eMudhra certificates, which allow malicious actors to create fake certificates. This is especially dangerous for validators using external signers, opening the door to manipulating block proposals or stealing rewards.
The good news is that no exploits have been reported, and default Teku mainnet nodes are not affected. But don’t be complacent—the risk is still present if you haven’t updated.
Take action now: Upgrade to Teku 26.10.3 or Besu 26.10.2. Docker users need the latest image, while everyone else must update their Java certificates separately. More importantly, if you’re using Java 26, SWITCH IMMEDIATELY to Java 25, because version 26 is no longer supported.
A sharp reminder of the importance of node maintenance. Have you checked and updated your system?
#Ethereum #Crypto
$ETH
The issue lies in insecure eMudhra certificates, which allow malicious actors to create fake certificates. This is especially dangerous for validators using external signers, opening the door to manipulating block proposals or stealing rewards.
The good news is that no exploits have been reported, and default Teku mainnet nodes are not affected. But don’t be complacent—the risk is still present if you haven’t updated.
Take action now: Upgrade to Teku 26.10.3 or Besu 26.10.2. Docker users need the latest image, while everyone else must update their Java certificates separately. More importantly, if you’re using Java 26, SWITCH IMMEDIATELY to Java 25, because version 26 is no longer supported.
A sharp reminder of the importance of node maintenance. Have you checked and updated your system?
#Ethereum #Crypto
$ETH