random

Litecoin

DeFi

Litecoin, a layer-1 proof-of-work (PoW) blockchain network, was hit by a “zero-day” vulnerability on Saturday, which caused a 13-block reorganization of the chain, according to the Litecoin team, while other developers say the bug may have been previously known.
The bug caused a denial of service (DoS) attack on mining pools with newly updated software, suppressing their hashing power, according to an <a href="https://x.com/litecoin/status/2048135554445832542" rel="noopener noreferrer nofollow">update</a> from the Litecoin team.
This allowed older nodes to “peg out” coins to decentralized exchanges and cross-chain swap protocols, resulting in invalid transactions being posted to the network’s MimbleWimble Extension Blocks (MWEB) privacy layer, according to the team.
The updated nodes eventually regained control of the network’s hashing power, executing a 13-block reorganization that reversed the invalid transactions, which will not appear on the main chain. The bug has now been fully patched, the Litecoin team said.
<figure><img alt="Cybercrime, Cybersecurity" src="https://s3.cointelegraph.com/uploads/2026-04/019dcac4-6762-7d11-912c-7e15b5dca10e.png">
 <figcaption>Source: <a href="https://x.com/litecoin/status/2048135554445832542" rel="noopener noreferrer nofollow">Litecoin</a> on X
 </figcaption>
</figure>
The incident comes amid an uptick in zero-day vulnerabilities -- that is, potential code exploits that are unknown to the software developers launching the product -- as AI systems like Anthropic’s Claude Mythos <a href="https://cointelegraph.com/news/claude-mythos-finds-thousands-of-zero-day-os-and-browser-vulnerabilities" rel="noopener noreferrer nofollow">outperform human beings</a> at identifying such attack surfaces.
Related: <a href="https://cointelegraph.com/news/kelp-exploit-non-isolated-defi-lending" rel="noopener noreferrer nofollow">Kelp exploit highlights problem with non-isolated DeFi lending: Crypto execs</a>
<h2 id="some-may-have-had-advanced-knowledge-of-software-bug">Some may have had advanced knowledge of software bug</h2>
A Binance address funded the attacker earlier in the week, suggesting that they had pre-planned the attack and had knowledge of the code exploit beforehand, <a href="https://x.com/AlexAuroraDev/status/2048162045292376100" rel="noopener noreferrer nofollow">according</a> to Alex Shevchenko, co-founder of Aurora, a layer-2 scaling network. He said:
<blockquote>
 “The fact that protocol automatically handled the reorg once DoS stopped, which is great, means that some portion of the hashrate was actually running an updated code. Thus, this bug was known, and it's not a zero-day.”
</blockquote>
“The timing and targeting suggest this wasn't a random opportunity,” blockchain developer Vadim <a href="https://x.com/zacodil/status/2048267575977558382" rel="noopener noreferrer nofollow">said</a> in response, <a href="https://x.com/zacodil/status/2048093765731037413" rel="noopener noreferrer nofollow">adding</a>, “Low hashrate layer 1’s are not safe collateral for cross-chain value anymore.”&nbsp;
<figure><img alt="Cybercrime, Cybersecurity" src="https://s3.cointelegraph.com/uploads/2026-04/019dcac5-f1d9-70b0-b95b-1268ce93314c.png">
 <figcaption>Source: <a href="https://x.com/zacodil/status/2048093765731037413" rel="noopener noreferrer nofollow">Vadim</a> (@zacodil on X)
 </figcaption>
</figure>
Cross-chain bridges, which transfer digital assets between different blockchain protocols, have long been a <a href="https://cointelegraph.com/news/layerzero-kelp-exploit-aave-loss" rel="noopener noreferrer nofollow">major attack surface in crypto</a>, causing billions of dollars in losses over the years. The most recent high-profile example of a bridge exploit was the April 18 <a href="https://cointelegraph.com/news/restaking-platform-kelp-exploited-293-million" rel="noopener noreferrer nofollow">attack on the Kelp restaking protocol</a>, which earlier this month left the platform drained of about $293 million.
Magazine: <a href="https://cointelegraph-magazine.com/exploits-uncovered-by-ai-could-kill-defi-unless-projects-act-now/" rel="noopener noreferrer nofollow">AI-driven hacks could kill DeFi — unless projects act now</a>

Litecoin gives post-attack update, but other devs doubt zero-day theory

Table of Contents

Cointelegraph

Other articles published on Apr 26, 2026

Join our free newsletter for daily crypto updates!