Tech giants rush to block 8 eMudhra certs that could enable fake sites
A private key generation flaw allowed anyone to guess them and forge HTTPS certificates for any website.
Asanat Analysis — Why it matters
A compromised certificate authority (eMudhra) represents a fundamental infrastructure failure with cascading implications for blockchain and crypto platforms. When HTTPS certificate generation is broken—allowing private key prediction—attackers can impersonate any domain, including exchanges, wallets, and DeFi protocols. This directly threatens the security assumptions underpinning user trust in crypto services.
The incident signals why decentralized identity and certificate mechanisms remain underdeveloped in crypto. Unlike traditional PKI (where revocation lists and browser vendors enforce trust), blockchain systems lack equivalent guardrails. Projects experimenting with DNS-over-blockchain or decentralized certificate authorities may gain renewed attention, though adoption remains minimal. This also reinforces why hardware security modules and institutional-grade key management—already critical for exchanges—become non-negotiable compliance features.