ConsenSys warns Web3Signer setups risk unauthorized signing
Summary
ConsenSys has issued a warning to operators using Web3Signer setups, highlighting a potential risk where compromised certificate keys could enable attackers to request unauthorized validator signatures. While default configurations of Web3Signer remain unaffected and no actual exploitation has yet been reported, this caution follows recent guidance shared among Ethereum client teams, including those behind Besu and Teku, in light of an incident involving the eMudhra certificate authority.
Analysis
ConsenSys: ConsenSys develops Ethereum infrastructure and tools, including the open-source Web3Signer remote signing service used by validators and clients. The company recently coordinated with other Ethereum teams on responses to a certificate authority incident and continues advancing institutional applications such as 24/7 tokenized asset settlement partnerships. Security Coordination: Ethereum client teams including those behind Besu, Teku, and Web3Signer have shared operator guidance following a recent eMudhra certificate authority incident. Institutional Infrastructure: ConsenSys has entered partnerships to support continuous, regulated settlement for wholesale tokenized markets.
Categories
cryptoethereumtech
Related sources
- https://docs.web3signer.consensys.io/reference/security-disclosure
- https://x.com/i/status/2114639734211510360
- https://consensys.io/blog/press-release
- https://diligence.security/blog/2026/10/consensys-diligence-fhenix-inside-a-fully-homomorphic-encryption-audit/
- https://x.com/i/status/2114641801315324378
- https://x.com/Consensys/status/2112904832625304024
- https://www.renascence.io/news/98943/24-7-settlement-for-wholesale-markets-cleartoken-and-consensys
- https://newreleases.io/project/github/Consensys-Incorporated/web3signer/release/26.7.0
- https://docs.web3signer.consensys.com/get-started/start-web3signer
- https://x.com/i/status/2114643197024723209
- https://newreleases.io/project/github/Consensys/web3signer/release/26.3.0
- https://thefintechtimes.com/cleartoken-and-consensys-tie-up-for-24-7-wholesale-settlement/
- https://x.com/i/status/2114642942749184025
- https://docs.web3signer.consensys.com/
- https://x.com/i/status/2114607095874048419