Litecoin Network Executes 13-Block Reorganization to Patch MWEB Zero-Day Exploit
Learn More
The Litecoin network rports a security incident involving a zero-day vulnerability in its MimbleWimble Extension Block (MWEB) privacy layer. The flaw allowed attackers to run a denial-of-service attack against mining pools and process invalid transactions through non-updated nodes. To stop the exploit, developers ran a 13-block chain reorganization, which rolled back three hours of transaction history to remove the invalid data.
The exploited flaw is a validation logic flaw in the MimbleWimble Extension Block (MWEB) component that allows outdated nodes to accept invalid peg-out transactions. Attackers exploit this by submitting malformed privacy-layer data that bypasses accounting checks meant to ensure coin conservation between the base chain and the sidechain. This allows for the unauthorized transfer of assets to decentralized exchanges and causes a denial-of-service condition for mining pools.
The exploit resulted in the exposure of several data points and assets:
- Unauthorized LTC transfers directed to third-party decentralized exchanges.
- Approximately $600,000 in financial exposure reported by the NEAR Intents protocol.
- Three hours of transaction history that was invalidated and rewritten during the reorganization.
The attack affected mining nodes running outdated software that did not enforce MWEB security protocols. These nodes accepted fraudulent transactions as valid, which caused a split in the network consensus. The transparent base layer remained sound but the accounting failure in the privacy sidechain required a network-wide rollback to prevent asset loss.
Litecoin developers patched the zero-day bug and confirmed the network is now stable. Node operators and mining pools must update their software to the latest version to validate MWEB transactions correctly and prevent DoS attacks. The team claims that all legitimate transactions were preserved, and the 13-block reorganization protected the network from corruption.
