Litecoin Network Recovers from Denial-of-Service Attack and 13-Block Chain Reorganization

A significant disruption occurred on the Litecoin network late Friday and Saturday, resulting in a 13-block chain reorganization that effectively rewound 32 minutes of network activity. This was in response to a denial-of-service attack that exploited a vulnerability in the Mimblewimble Extension Block (MWEB) protocol, allowing invalid transactions to bypass nodes that had not been updated. The Litecoin Core v0.21.5.4 release has since been made available, containing crucial security updates.

According to the Litecoin Foundation, the network is now operating normally. However, an examination of the litecoin-project GitHub repository reveals that the consensus vulnerability was privately patched between March 19 and 26, more than four weeks before the attack took place.

This timeline has raised concerns among researchers, who point out that the vulnerability was known and patched a month prior to the exploit but had not been publicly disclosed or mandated for all mining pools. This created a window of opportunity for attackers, who appeared to be aware of which miners were running the patched code and which were still vulnerable. The attack involved a combination of a denial-of-service vulnerability and the MWEB bug, with the former designed to take patched mining nodes offline, allowing the unpatched ones to form a chain that included the invalid transactions. Blockchain data indicates that the attacker had pre-funded a wallet 38 hours before the exploit, with the intention of swapping LTC for ETH on a decentralized exchange.

The automatic handling of the 13-block reorganization by the network, once the denial-of-service attack ceased, suggests that a sufficient amount of hashrate was running updated code to eventually overpower the attack. This incident highlights the differences in how various networks respond to exploits, with newer chains often coordinating upgrades more quickly and older proof-of-work networks like Litecoin and Bitcoin facing challenges in rapidly implementing security patches across independent mining pools.