Fireblocks urges action after eMudhra intermediate certificate compromise

Fireblocks said eight eMudhra intermediate certificate authority certificates had compromised private keys and warned that some software outside normal browser controls may still trust them until updated. The company said it removed the affected certificates from relevant platform flows, found no use of them across its platform after its changes, and saw no impact to customer assets, communications or funds in its review. In its Oct. 21, 2026 blog post, Fireblocks said six of the compromised intermediates were TLS certificates and two were code-signing intermediates. It said browsers have blocked the certificates, but clients that do not check revocation data may continue to trust them. The post also said it is not publicly known whether attackers exploited the weakness against those clients.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Blockchain.News.