Big Tech’s eMudhra fixes may leave crypto bots exposed, CertiK warns
CertiK says crypto trading bots and exchange applications may remain exposed to the eMudhra certificate flaw because browser fixes may not protect all software.
Cryptocurrency trading bots and exchange applications may remain exposed to the eMudhra certificate security flaw despite emergency fixes from major technology companies, according to blockchain security company CertiK.
By Tuesday, tech giants including Google, Apple and Microsoft had blocked eight vulnerable certificates issued by India’s eMudhra, but the fixes may not protect crypto applications using separate security systems, CertiK’s senior director of digital assets security, Peiyu Wang, told Cointelegraph.
“Major browser blocks substantially reduce the risk for clients that receive and enforce them,” Wang said. “Some applications outside the browser ecosystem do not enforce Certificate Transparency or receive the same revocation protections.”