Obol urges immediate Charon upgrade after CA key compromise

Obol Network wants its mainnet operators to stop what they’re doing and update. The project shipped Charon v1.11.2 on October 21, 2026, an urgent patch tied to a compromise of intermediate certificate authority (CA) certificates linked to the eMudhra incident. The stakes are not small. Obol’s mainnet cluster balances totaled 422,862 ETH in its latest daily snapshot, and that capital runs through the very client being patched. What Charon v1.11.2 actually changes The release centers on certificate validation. It upgrades the Go programming language version underneath Charon, which updates how the client checks certificates and corrects known vulnerabilities connected to the CA compromise. It also distrusts specific roots inside the Docker image that operators use to deploy Charon. Put simply, the software now refuses to vouch for certain certificate issuers it previously would have accepted. Obol is strongly recommending that mainnet operators running the Go-based Charon client upgrade immediately. A browser-sized problem lands on Ethereum staking The broader incident was reported around October 17, 2026, and has been designated CVE-2026-111943. CVE identifiers are the standard cata...