Besu Fixes Five Security Vulnerabilities Found by CertiK

Besu, an open-source Ethereum client written in Java, has fixed five security vulnerabilities found by CertiK. The issues affected the client's peer-to-peer, RPC, WebSocket, and consensus-facing interfaces.

The vulnerabilities could exhaust node memory or thread capacity, disrupting node availability or consensus processing under affected configurations.

CertiK reported the findings directly to Besu, providing reproducible proof-of-concept test harnesses for evaluation. The two teams coordinated confidentially before making technical information public after the patched release was available.