Litecoin's development team confirmed that a zero-day vulnerability was responsible for the 13-block chain reorganization on April 25, 2026. The bug enabled invalid MimbleWimble Extension Block (MWEB) transactions to be submitted through non-updated nodes, which were subsequently reversed by the reorganization before settling on the main chain.
Not a 51% Attack
Initially mistaken for a 51% attack, the event was clarified by Litecoin as a corrective measure against exploitation. The reorganization intentionally rolled back 13 blocks to remove invalid transactions, ensuring the integrity of the main chain. All legitimate transactions remained unaffected.
Vulnerability Details: MWEB Validation Flaw
The zero-day bug specifically targeted the MimbleWimble Extension Block (MWEB) validation process. Nodes running older versions accepted specially crafted invalid MWEB transactions, allowing them to temporarily enter the network. The core team quickly identified the issue and released a patch, urging all nodes to upgrade.
Impact and Response: $600K Exposure
Cross-chain protocol NEAR Intents reported an exposure of approximately $600,000 during the incident. However, because all invalid transactions were wiped by the reorg, actual losses are likely much lower. Litecoin assured that no user funds were permanently lost.
Market Reaction
Litecoin (LTC) showed minimal price movement, gaining only about +0.02% as the market reacted calmly. In contrast, NEAR Protocol (NEAR) rose by 11.53%, possibly reflecting short-term sentiment shifts related to cross-chain security assessments.
Security Lessons: Outdated Nodes Remain a Weak Link
This incident underscores vulnerabilities in proof-of-work networks where outdated nodes are present. Even with strong hashrate, old client versions can become attack vectors. Litecoin urged mining pools and node operators to update promptly, and advised cross-chain protocols to reassess their risk exposure across different blockchains.