besu

Ethereum’s latest “security flaw” headline needs a narrower reading.
This was not a mainnet consensus bug or wallet breach.

Weak eMudhra certificate keys could let an attacker impersonate external services trusted by some #Teku and #Besu setups, potentially redirecting validator rewards.

Default Teku mainnet nodes were not affected, and no exploitation has been reported.

Teku 26.10.3 and Besu 26.10.2 remove the affected roots from Docker images. The overlooked risk is binary installs: updating the #Ethereum client does not update the host’s Java trust store.

Operators should patch Java separately; Java 26 users need to move to a supported build.

For $ETH holders, the network is not under attack. For operators, this is an infrastructure patch, not a headline to ignore.