India’s eMudhra faced a digital certificate security incident after researchers recovered eight private keys generated with dangerously weak values.
Disclosed on October 17, 2026, the vulnerability affected intermediate certificate authorities and prompted browser vendors to block the associated certificates. Researchers found that simple integers, including 4, 56 and 237, made the keys recoverable in under a second.
The compromised eMudhra private keys could let attackers create fraudulent certificates and impersonate trusted websites. This risk extends to cryptocurrency platforms, exchange APIs and wallet services that rely on affected certificates. Systems that fail to check certificate revocation status may remain exposed, although no confirmed attacks on crypto users have emerged.
The incident involved eight intermediate certificate authority certificates created in April 2025, according to reported findings. Six supported TLS connections, while two handled code signing, which helps verify software authenticity. The weakness did not break the underlying cryptographic algorithm. Instead, inadequate randomness made the private keys easy to recover.
A compromised certificate authority key can help attackers make fake websites appear legitimate. In crypto environments, this could support phishing, traffic interception or malicious software distribution. However, the incident does not indicate a direct breach of Bitcoin, Ethereum or users’ wallet private keys.
Mozilla received the vulnerability report on October 17, while eMudhra revoked the affected certificates. Reports say Chrome, Apple and Microsoft subsequently introduced blocking measures or trust store updates. eMudhra has stated that the incident affected the eight intermediate certificates, not its root certificate authority keys.
The response aims to prevent browsers and systems from trusting certificates linked to the compromised keys. Software and services that do not promptly check revocation status may require additional review. Developers should audit certificate dependencies and code signing workflows that may have relied on the affected intermediates.
No public reports currently confirm exploitation against cryptocurrency users. The incident highlights how weak certificate management can threaten crypto services, even when blockchain networks remain unaffected.
Also Read: Eternal Block Deal: Goldman Sachs Sells Rs. 169 Crore Stake