Back Kucoin

Litecoin was back in the spotlight last Saturday! A zero-day

Kucoin • April 26, 2026

Litecoin was back in the spotlight last Saturday! A zero-day vulnerability in the MimbleWimble Extension Block (MWEB) privacy layer caused a 13-block reorganization on the chain, resulting in a 3-hour fork. According to Alex Shevchenko, CEO of Aurora Labs, some cross-chain swap protocols were affected by double-spend attacks. Fortunately, the Litecoin Foundation announced that the vulnerability has been patched 🎯 Security measures within the Litecoin ecosystem are crucial! #Litecoin #MWEB

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Litecoin Faces 13-Block Reorganization Due to Zero-Day Vulnerability Exploitation On April 25, 2026, Litecoin experienced a significant 13-block chain reorganization after attackers exploited a zero-day vulnerability in its MimbleWimble Extension Block (MWEB) protocol. The vulnerability allowed outdated mining nodes to validate invalid MWEB transactions, enabling attackers to peg out coins to third-party decentralized exchanges. This incident resulted in a denial-of-service (DoS) attack that disrupted major mining pools. The Litecoin Foundation confirmed that all invalid transactions during the exploit were reversed and that valid transactions remained unaffected. The vulnerability was patched with the release of Litecoin Core v0.21.5.4 on the same day as the attack began. Security researchers have raised concerns that the consensus vulnerability had been privately patched weeks before the attack, suggesting a lapse in communication about the necessary updates. The incident highlights vulnerabilities in proof-of-work networks where miners may run outdated software. The network is currently operating normally after the patch. 24 sources 70

Extracted Entities

Companies (2)

Aurora Labs Litecoin Foundation