eMudhra
eMudhra, an Indian certificate issuer, issued forged certificates after a key compromise discovered in mid‑October 2026. The flaw enabled forged certificates that could impersonate services such as Stripe’s API and caused some Ethereum clients running Teku or Besu to trust forged certificates, potentially redirecting ETH rewards. Default mainnet nodes remained unaffected. Security mitigations included Mozilla, Chrome, Apple, and Microsoft blocking the compromised certificates; Apple blocked them on 19 Oct 2026 and Microsoft on 20 Oct 2026. Private keys were recovered by Scott Helme and others, identifying eight compromised intermediate certificates (emSign Root CA – G1, G2, G3 and AAA Certificate Services). The incident prompted an investigation and temporary suspension of Ledger hardware sales in several countries, but the affected Ethereum setups were patched promptly.· Entity summary generated by Graphiti
Relation timeline
BY VALID-FROM DATE- eMudhraIMPACTEDEthereum
eMudhra caused a security failure that impacted Ethereum
- eMudhraLEFT TRUSTING FORGED CERTIFICATESTeku
eMudhra left some Teku setups trusting forged certificates
- eMudhraLEFT TRUSTING FORGED CERTIFICATESBesu 26.9.0
eMudhra left some Besu setups trusting forged certificates
- Charles GuillemetREPORTED COMPROMISE OFeMudhra
Charles Guillemet reported the compromise of eight intermediate certificates belonging to eMudhra
- MicrosoftBLOCKED CERTIFICATES ISSUED BYeMudhra
Microsoft blocked eight vulnerable certificates issued by eMudhra.
- GoogleBLOCKED CERTIFICATES ISSUED BYeMudhra
Google blocked eight vulnerable certificates issued by eMudhra.
- CertiKALERTS ABOUTeMudhra
CertiK alerts that crypto trading bots and exchange applications may remain exposed to the eMudhra certificate flaw because browser fixes may not protect all software.
- AppleBLOCKED CERTIFICATES ISSUED BYeMudhra
Apple blocked eight vulnerable certificates issued by eMudhra.
- MicrosoftBLOCKED CERTIFICATES OFeMudhra
Microsoft platforms blocked the eMudhra Limited certificates
- FirefoxBLOCKED CERTIFICATES OFeMudhra
Mozilla Firefox blocked the eMudhra Limited certificates using OneCRL
- AppleBLOCKED CERTIFICATES OFeMudhra
Apple devices blocked the eMudhra Limited certificates
- The RegisterREPORTS ONeMudhra
The Register reported that eMudhra issued over 60 million certificates
- CyberleekREFERENCE TOeMudhra
Mozilla’s Official Security Bulletin references eMudhra’s compromised keys
- Cyber Security NewsREPORTS ONeMudhra
Cyber Security News reported on eMudhra’s key compromise
- Scott HelmeIDENTIFIED SECRET KEYS FOReMudhra
Scott Helme identified that eMudhra’s secret keys were compromised
- Scott HelmeWROTE ABOUT PRIVATE KEYS FOReMudhra
Scott Helme wrote that eMudhra’s private keys were tiny integers
- ChromeBLOCKED CERTIFICATES FOReMudhra
Google Chrome blocked eMudhra’s compromised certificates the same day as the report
- EasyABLOCKED CERTIFICATES FOReMudhra
Microsoft blocked eMudhra’s compromised certificates on October 20, 2026
- MozillaBLOCKED CERTIFICATES FOReMudhra
Mozilla blocked eMudhra’s compromised certificates
- WayneIDENTIFIED KEY COMPROMISE ATeMudhra
Wayne identified that eMudhra had a key compromise
- e-Conomy SEABLOCKED CERTIFICATES FOReMudhra
Apple blocked eMudhra’s compromised certificates on October 19, 2026
- Scott HelmeRECOVERED KEYS FROMeMudhra
Scott Helme recovered all eight compromised keys from eMudhra
- eMudhraCAN FORGE CERTIFICATES FORStripe
eMudhra can forge certificates that could impersonate Stripe's API
- CoinDeskCONTACTEDeMudhra
CoinDesk contacted eMudhra for comment on the key compromise
- MozillaRECOVERED PRIVATE KEYS OFeMudhra
Mozilla independently recovered the private keys of eMudhra Limited
- AppleBLOCKED CERTIFICATES FROMeMudhra
Apple blocked eMudhra's certificates
- MozillaBLOCKED CERTIFICATES FROMeMudhra
Mozilla blocked eMudhra's certificates
- WayneREPORTED SECURITY FLAW FOReMudhra
Wayne reported a security flaw involving eMudhra
- ChromeBLOCKED CERTIFICATES FROMeMudhra
Chrome blocked eMudhra's certificates
- eMudhraCOMPROMISES CERTIFICATE ROOTAAA Certificate Services
eMudhra compromised AAA Certificate Services
- eMudhraCOMPROMISES CERTIFICATE ROOTemSign Root CA – G1
eMudhra compromised emSign Root CA – G1
- eMudhraCOMPROMISES CERTIFICATE ROOTemSign ECC Root CA – G3
eMudhra compromised emSign ECC Root CA – G3
- eMudhraCOMPROMISES CERTIFICATE ROOTemSign Root CA – G2
eMudhra compromised emSign Root CA – G2
Relations are facts Graphiti extracted from reports, not verbatim quotes. An end date means later reporting showed the relation no longer holds.
Events 4
- Security failure at Indian certificate firm bites Ethereum as developers rush out fixes2 cited reports · 2026-10-29
- Ethereum client security fixes leave binary users with a separate Java check1 cited report · 2026-10-28
- Crypto security chiefs sound alarm as PHP emergency patch scrambles devs worldwide1 cited report · 2026-10-22
- Tech giants rush to block 8 eMudhra certs that could enable fake sites2 cited reports · 2026-10-21
Source reports 6
- Security failure at Indian certificate firm bites Ethereum as developers rush out fixesCoinDesk · 2026-10-29
- Ethereum client security fixes leave binary users with a separate Java checkCryptoSlate · 2026-10-28
- Crypto security chiefs sound alarm as PHP emergency patch scrambles devs worldwideCryptoSlate · 2026-10-22
- Big Tech’s eMudhra fixes may leave crypto bots exposed, CertiK warnsCointelegraph · 2026-10-21
- Tech giants rush to block 8 eMudhra certs that could enable fake sitesCointelegraph · 2026-10-21
- A company that vouches for websites had secret keys so weak that 8 of them were crackedCoinDesk · 2026-10-21