Ethereum Validator Rewards Faced Risk Before Security Patches

TLDR Ethereum clients Teku and Besu released security updates on October 27 and 26, respectively. Weak certificate keys linked to India’s eMudhra could have allowed attackers to impersonate external services. Attackers could have redirected Ethereum validator block fees through compromised connections. Teku confirmed that default mainnet nodes remain unaffected and reported no known exploitation. Developers corrected a Glamsterdam flaw that could have sent validator deposits to builder accounts. The revised Glamsterdam rules use withdrawal credentials to distinguish validator deposits from builder deposits. Ethereum developers fixed two separate flaws that could have threatened validator deposits and block rewards. One involved website certificates. The other affected draft Glamsterdam upgrade rules. Teku released version 26.10.3 on October 27, following Besu’s 26.10.2 update on October 26.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to CoinCentral.