A recent denial-of-service attack on the Litecoin network led to a 13-block chain reorganization, which was rectified after the implementation of a patch to fix a vulnerability in the Mimblewimble Extension Block protocol. The attack, which occurred on Friday and Saturday, allowed invalid transactions to be processed before the network's longest valid chain corrected them. The Litecoin Core v0.21.5.4 release contains important security updates, and users are advised to upgrade. However, an analysis of the litecoin-project GitHub repository reveals that the vulnerability was privately patched between March 19 and 26, more than four weeks before the attack.
This has raised questions about the network's response to security threats and the potential for similar attacks in the future. The incident highlights the differences in how various networks respond to exploits, with newer chains able to coordinate upgrades quickly and older proof-of-work networks like Litecoin and Bitcoin relying on independent mining pools to upgrade, creating a window of vulnerability.