70% of Litecoin nodes haven't installed critical patch after April's double-spend attack, risking network security.

In April, a hacker exploited a flaw in Litecoin’s MimbleWimble Extension Block (MWEB) transactions, causing a double-spend attack that required a 13-block reorganization to fix. Despite patches released immediately after the attack, about 70% of Litecoin nodes, mostly non-mining validating nodes, have not updated their software, leaving the network vulnerable to similar exploits. Mining nodes have mostly updated due to direct risk, but the slow adoption among other nodes poses ongoing security risks. The Litecoin team continues urging updates, but no deadline or enforcement mechanism exists in the decentralized network, leaving uncertainty about future attacks.



Source link