According to the latest report, major Litecoin mining pools were hit by a Denial-of-Service (DOS) attack this weekend due to a zero-day vulnerability in the network. The Litecoin Foundation confirmed that the bug has been patched and the network is fully operational.
Litecoin Attacker Attempts Double-Spend Exploits On Cross-Chain ProtocolsThe foundation explained that the vulnerability allowed non-updated mining nodes to facilitate an invalid MWEB transaction, which enabled individuals to peg out coins to third-party decentralized exchanges. This DOS attack caused a disruption to the normal operations of major mining pools, the post-mortem report read.
The Litecoin Foundation noted that the attack was mitigated through a 13-block reorganization (reorg), which reversed the invalid transactions and prevented them from being added to the blockchain. “All valid transactions during that period remain unaffected,” the foundation further clarified.
Aurora Labs CEO: Zero-Day Or Inside Job?Aurora Labs CEO Alex Shevchenko, who caught the Litecoin attack early, suggested that the DOS exploit had the markings of an inside job. According to the crypto founder, the attacker planned to swap LTC into ETH on a recently funded address, suggesting the exploiter knew about the bug from the outset.
Shevchenko wrote on X:
The fact that protocol automatically handled the reorg once DoS stopped (which is great) means that some portion of the hashrate was actually running an updated code. Thus, this bug was known and it’s not a zero-day.
As of this writing, the price of LTC is around $55.92, with no significant change over the past 24 hours. Despite the FUD (fear, uncertainty, and doubt) surrounding news of this DOS attack, the altcoin dropped by about 1.2% on the day.
