CertiK stated that despite Google, Apple, and Microsoft blocking 8 affected certificates issued by eMudhra, encrypted trading robots and exchange applications still face vulnerability risks. Peiyu Wang, Senior Director of Digital Asset Security at CertiK, pointed out that attackers can use compromised certificates to impersonate exchanges, wallet interfaces, and APIs, replace recharge addresses, or induce users to approve malicious transactions. However, such attacks require intercepting or redirecting network traffic, and the affected certificate authority keys cannot expose wallet private keys. The encryption service operator should update the software and certificate trust repository, and confirm that the application rejects the affected certificates. (Source: Cointelegraph)
