Fireblocks says eight compromised eMudhra intermediate CA certificates may affect some trust paths and has issued version updates for affected products.

Fireblocks said eight eMudhra intermediate certificate authority certificates had compromised private keys and warned that some software outside normal browser controls may still trust them until updated. The company said it removed the affected certificates from relevant platform flows, found no use of them across its platform after its changes, and saw no impact to customer assets, communications or funds in its review.

In its Oct. 21, 2026 blog post, Fireblocks said six of the compromised intermediates were TLS certificates and two were code-signing intermediates. It said browsers have blocked the certificates, but clients that do not check revocation data may continue to trust them. The post also said it is not publicly known whether attackers exploited the weakness against those clients. Fireblocks described the issue as a trust-store problem for software that still anchors trust to the affected intermediates, rather than a platform-wide failure.

1 or a move to the current Python SDK. 2026 no longer includes the affected certificates. For customers using callback authentication based on certificate pinning or a root-CA certificate, it said the affected certificates are not used, although routine upgrading is still recommended. For public key authentication, it advised upgrading to the latest Co-Signer image.

Source link