Litecoin reverses first major MWEB exploit via 13-block reorg, ~$600K in invalid pegouts undone

A zero-day bug in Litecoin's MWEB privacy layer let outdated mining nodes wave through invalid pegouts on April 25, with NEAR Intents flagging ~$600K in exposure to third-party DEXs. The first major exploit of MWEB got rolled back by a 13-block reorg — roughly 32 minutes of chain history rewritten — and the Litecoin team says the bug is patched and the network is stable. Zcash's Zooko jumped in to note this is the same rollback-and-double-spend pattern that's hit Monero and Grin recently, basically the running tab for running a privacy stack on PoW-only consensus.

TLDR by @Benthic

More coverage

• Here's How Litecoin (LTC) Contained a Massive MWEB Exploit (cryptopotato.com)
• Litecoin MWEB Security Incident Postmortem - LitecoinTalk Forum (litecointalk.io)
• Veteran blockchain Litecoin in trouble! Hackers exploit zero-day ... (binance.com)
• Litecoin Reorg Reverses Invalid MWEB Transactions After Zero-Day ... (x.com)
• Litecoin MWEB Block Explorer | MWEB Explorer (mwebexplorer.com)

Explore the topic

• Exploit
• Litecoin