Ethereum software teams published updates addressing trust-store exposure linked to compromised eMudhra certificate-authority keys. Teku lists version 26.10.3 as a recommended update, while Besu version 26.10.2 removes affected roots from its Docker images. The issue is not a flaw in Ethereum’s consensus rules, and client teams have not reported a successful exploit affecting default mainnet Teku nodes.
A compromised authority may allow attackers to impersonate trusted services in vulnerable configurations, but the source does not establish that every operator was exposed or that validator rewards were stolen. Operators using a separate Java runtime may need to update it or change its trust store independently; replacing the client executable alone may not fix that environment.
