Security ✓LaunchBar Newsroom 📅 October 29, 2026 at 08:30 AM ⏱ 2 min

Ethereum Patches Reward-Redirect Flaw Before Exploitation

Ethereum validator software has patched a certificate flaw that could have let attackers impersonate trusted services and redirect ETH block rewards. No exploitation has been reported, and default Teku mainnet nodes were not exposed.

Teku released 26.10.3; Besu shipped 26.10.2
Weak cryptography exposed private keys for 8 eMudhra intermediate certificate authorities
Docker operators should update immediately; direct installs must update Java separately

LaunchBar takeaway: this was a credible reward-theft path, not a theoretical bug in Ethereum consensus. Validators should patch now, while traders watch for any operational disruption—but there is no evidence of stolen ETH or a network-level emergency.

Connect

Disclaimer

All content provided on our website, hyperlinked sites, associated applications, forums, blogs, social media accounts, and other platforms (“Site”) is for your general information only, procured from third-party sources.

No Warranties

We make no warranties of any kind in relation to our content, including but not limited to accuracy, security, and updatedness.

No Financial or Legal Advice

No part of the content that we provide constitutes financial advice, legal advice, or any other form of advice meant for your specific reliance for any purpose. Any use or reliance on our content is solely at your own risk and discretion.

Do Your Own Research (DYOR)

You should conduct your own research, review, analyze, and verify our content before relying on it.

High Risk Warning

Trading is a highly risky activity that can lead to major losses. Please consult your financial advisor before making any decision. No content on our Site is meant to be a solicitation or offer.