Zero-day exploit triggers 13-block reorg on Litecoin, patch now deployed

A zero-day vulnerability in Litecoin's codebase was exploited on April 25, triggering a 13-block reorganization that temporarily suspended transaction finality across major mining pools. The attack leveraged un-updated nodes that incorrectly accepted invalid MimbleWimble Extension Block (MWEB) transactions, allowing a DoS flood that disrupted the network long enough to peg out coins to third-party DEXs before the reorg reversed them.

The Litecoin team confirmed the bug via their official account and stated a patch has been fully deployed, with node operators urged to update immediately. No user funds were lost — the reorg itself unwound the invalid transactions — but a 13-block depth is a serious network event by any standard, not a routine fork.

Price held relatively steady following the disclosure, suggesting sellers did not fully capitalise on the headline. The key structural level…