CertiK says crypto trading bots and exchange apps may remain exposed to the eMudhra certificate flaw even though Google, Apple and Microsoft have blocked eight vulnerable certificates issued by India's eMudhra. Many applications outside the browser ecosystem do not enforce Certificate Transparency or receive the same revocation protections, so browser fixes may not cover them. Attackers could use compromised certificates to impersonate HTTPS connections to exchanges, wallets and APIs, replacing deposit addresses or tricking users into approving malicious transactions, though this would also require intercepting or redirecting users' traffic. CertiK urges operators to update their software and certificate trust stores and verify that their applications reject the affected certificates.
Summary written by Upside AI from the original article. Read the source for full details.
Original headline: Big Tech’s eMudhra fixes may leave crypto bots exposed, CertiK warns
Read the original on Cointelegraph ↗
Keywords
cybersecuritycryptodigital certificates
Open a keyword to see other news on the same topic.
Related tickers and likely impact
BTC/USDT
• NeutralBitcoin
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Layer 1 |
| Market cap | $1.6T |
| Close on 10/20/2026 | 83,028.15 |
| Change that session | +1.33% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- Drift exploiter sends $109M in Ether to Tornado Cash in 2 days
Wallets linked to the Drift exploiter sent another 18,800 ETH (about $46 million) to Tornado Cash on Wednesday, bringing the two-day total to 44,510 ETH, or $109 million, according to Onchain Lens. These transfers account for nearly 37% of the $295 million stolen from the Solana-based DEX in April, making the funds harder to trace. The labelled wallets still hold 56,569 ETH, worth about $138 million, per Arkham data. DefiLlama ranks the attack as this year's third-largest crypto hack, and security consultant Mandiant attributed it to a North Korean threat group.
- Qubic restarts blockchain, opens recovery claims after $1.4M hack
Layer-1 blockchain Qubic restarted its network and opened a recovery process after an attacker drained roughly $1.4 million in QU tokens from 1,404 accounts by exploiting predictable wallet seeds. The network was halted on Sunday to stop stolen funds from moving and resumed processing on the evening of Oct. 19. Its validators, known as Computors, approved the recovery plan, and affected users can check their address and file claims until May 1, 2027. The flaw came from an insecure random-number generator in Qubic's web wallet on certain Apple devices and browsers, and the project says wallets created before version 4.26.4 should be treated as insecure, with users advised to update, create a new wallet and move their funds.
- Wallet Linked to Drift Exploit Sends $61 Million in Ethereum to Tornado Cash
Wallets linked to Drift's April 1 exploit moved about 25,700 Ethereum, worth roughly $61.56 million, into the Tornado Cash mixer over about two hours on Tuesday. Arkham data shows 71 addresses tied to the attacker still hold 81,454 ETH, worth about $198.58 million, after an earlier 23,095 ETH transfer in July. The attacker gained admin powers, introduced a fake token and used it to borrow real liquidity from Drift's Solana vaults, in an exploit totaling $295 million. Drift opened claims for its DFX recovery token on Oct. 1, and early redeemers received roughly 0.0104 USDT per token, about a penny per dollar lost.
- Drift exploiter sends $61M ETH to Tornado Cash, holds $194M
A wallet linked to the Drift Protocol hack sent about $61 million in Ether (ETH) to Tornado Cash, a mixer that obscures transaction trails, according to Lookonchain. The wallet deposited 25,700 ETH over two hours on Tuesday, after two months of inactivity. Arkham data shows the exploiter's addresses still hold about 81,454 ETH, worth roughly $194 million. Drift, a Solana-based decentralized exchange, reported about $295 million in losses from the April 1 hack, which Mandiant later attributed to the North Korean threat group UNC6862. DefiLlama ranks it as the third-largest crypto hack of 2026.
- Bitget plans Thai crypto exchange acquisition weeks after $388M hack
Crypto exchange Bitget has announced plans to acquire Thailand's GMO-Z.com Cryptonomics, operator of Z.com EX, through BTGT Management (Thailand), to expand in Southeast Asia and enter Thailand through a locally licensed operator. GMO Internet disclosed the sale in a September 24 filing, targeting completion on October 31, subject to regulatory approval and other conditions. The deal follows a September 24 attack on Bitget's hot and warm wallets, which affected about $388 million after attackers exploited a vulnerability in a third-party security product to issue fraudulent withdrawals. Bitget said customer account balances were unaffected and that it completed the phased restoration of withdrawals by October 2. The company did not disclose its interest in BTGT Management or the deal's financial terms.
- Qubic freezes chain after attacker drains 1.4K wallets with weak seeds
Layer-1 blockchain Qubic halted its network after an attacker exploited weakly generated wallet seeds to drain about $1.4 million from more than 1,400 accounts, according to the project. The vulnerability affected wallets created with any browser on iPhone or iPad, Safari on Mac until Oct. 18, 2026, or the Qubic iOS app before July 2025, with 2.94 trillion QU stolen. Qubic says 87.1% of the funds remain frozen on its network, while 12.9% was sent to MEXC, whose team froze the receiving account within about an hour. The team has fixed the flaw in web wallet version 4.26.4, is identifying affected wallets, and will let Computors vote on a recovery plan; no restart date has been announced. The article links the incident to a series of weak-seed attacks in recent years.
Related markets
Latest news
- CoreWeave debt tumbles anew as Korean neocloud IPO tanks
CoreWeave's debt fell again on October 20 as investors reacted poorly to the public-market debut of Elice Group, a South Korean cloud company often called the South Korean equivalent of CoreWeave. Despite being almost 400 times oversubscribed and pricing at the top of its range, Elice's shares plunged over 32% in their KOSDAQ debut. The article says this is another sign that the neocloud business model might be broken. Elice locked in its IPO pricing on October 6, a day before macro anxiety and capex concerns.
- The bull case for CoreWeave as GPU demand surges
In the Loop host Ejaaz Ahamadeen makes the bull case for CoreWeave (CRWV), arguing that demand is pushing secondhand GPU prices higher. He cites comments from Amazon CEO Andy Jassy on demand for AI infrastructure and says AI capex differs from the dotcom era because buyers are willing to pay premiums. According to the host, secondhand GPU prices are at their highest ever, with older GPUs now worth twice their original price despite being 5 to 10 years old. He also argues CoreWeave's financing is not siloed, since customers such as Microsoft, Meta and Google can obtain attractive financing rates. He cites Elon Musk saying talks to buy compute from neoclouds have been the hardest ever, which the host attributes to providers having already pre-sold capacity at higher premiums.
- Where is Optimus? Key questions for Tesla earnings.
Hosts of The 8:30 preview Tesla's (TSLA) earnings report, where investors want updates on the Optimus robot, robotaxi expansion beyond Austin and SF, and capital expenditure. The key figures cited are revenue of $28.13 billion and EPS of 44 cents. Tesla announced capex of about $25 billion last quarter, and the hosts question whether it will go higher. The stock rose only about 1.7% this morning despite news of a possible SpaceX merger, and is still down 17% year to date after a strong rebound from its lows.
- SpaceX stock soars to its best day in two months while space peers climb out of a 26% hole
SpaceX (SPCX) opened with its biggest gain since its June debut and is on pace for its best day in two months. The rally follows third-quarter revenue and profit that beat Wall Street estimates, with the AI business now generating nearly half of sales. CEO Elon Musk said SpaceX and Tesla (TSLA) have each formed committees to study a merger. Through Tuesday, SpaceX was down just 2% in October, versus a drop of about 26% for the typical newer space stock. Chris Versace of Tematica Research said the planned $35B to $40B of fourth-quarter spending implies higher capex than the market expected, though it is backed by a $63B backlog, and up to 1.3 billion shares unlock on Thursday.
- Super Micro Soars 12% as Preliminary Revenue Blows Past Guidance on “Increased Demand for AI Platforms”
Super Micro (SMCI) jumped 12% after saying preliminary fiscal first-quarter revenue would be $18.5 billion to $19.5 billion, well above its earlier guidance of $14.5 billion to $15.5 billion. It also expects gross margin of 12.0% to 12.5%, above the 10.4% to 10.8% it had guided, which the article says matters more for earnings. Dell, HPE and Vertiv also gained, and Amkor rose after a $1.3 billion investment in South Korea. However, Super Micro burned nearly $7 billion of free cash flow last fiscal year, so its November 3 earnings call needs to show the bigger quarter turning into cash. The figures are preliminary and unaudited.
- Meta earnings preview: CapEx and Muse are in the spotlight
The 8:30 hosts preview Meta's (META) earnings report due tonight, highlighting capital spending and adoption of its Muse AI agent, including downloads and retention, as the two main items analysts will watch. Capex for the quarter is cited at about $41 billion. Consensus expectations are EPS of $3.56 and revenue of $63.3 billion. Options now imply a one-day move of about 6.6%, up from about 3.2% earlier. The stock surged after the Muse news but has since drifted lower along with the broader AI trade.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.