A recent attack on the Litecoin network involved a denial-of-service exploit that targeted a vulnerability in its Mimblewimble Extension Block protocol, resulting in a 13-block reorganization to reverse the effects. The vulnerability had been privately patched between March 19 and 26, but the fix had not been publicly disclosed or mandated for all mining pools. This created a window of opportunity for attackers, who appeared to be aware of which mining nodes were running the patched code and which were still vulnerable.
The attack was eventually mitigated after the network's longest valid chain corrected the invalid transactions. The Litecoin Foundation has released an update, version 0.21.5.4, which contains important security updates, and all users are advised to upgrade.
The incident highlights the challenges faced by older proof-of-work networks like Litecoin, where independent mining pools can choose when to upgrade, creating a window of vulnerability in the event of a security patch.