Fireblocks urges action after eMudhra intermediate certificate compromise
Fireblocks says eight compromised eMudhra intermediate CA certificates may affect some trust paths and has issued version updates for affected products. (Read More)
Asanat Analysis — Why it matters
A compromised certificate authority (CA) in the infrastructure layer signals infrastructure fragility at scale. eMudhra, a subordinate CA trusted by major root authorities, issued intermediate certificates now flagged as potentially malicious—a supply-chain risk vector that affects any service relying on those trust paths. Fireblocks' rapid disclosure and patching suggests they caught this early, but the window between compromise and detection is always the vulnerability.
This type of incident exposes the centralized trust assumptions baked into institutional crypto custody and signing infrastructure. While blockchain protocols themselves are decentralized, the TLS/certificate layer protecting access to wallets, exchanges, and bridges remains dependent on legacy PKI hierarchies. The incident underscores why institutional-grade infrastructure vendors must maintain robust monitoring of their own dependencies—a practice still maturing across the sector.