1 hour ago
Mining excavation F2pool confirmed it mined each 13 consecutive blocks needed to adjacent Litecoin’s impermanent concatenation split, which was triggered erstwhile an exploit of the network’s MimbleWimble Extension Blocks (MWEB) privateness furniture allowed an attacker to fabricate an invalid 85,034 LTC pegout.
Key Takeaways:
- f2pool mined each 13 blocks connected the valid Litecoin chain, resolving the April 25 web split.
- An MWEB exploit fto an attacker fake an 85,034 LTC pegout, triggering a 13-block reorganization.
- Litecoin Core v0.21.5.4 present patches some the inflation bug and the mining node stall down the attack.
How the Exploit Unfolded
On April 25, the Litecoin web began processing invalid transactions connected its MWEB layer, a privateness hold that lets users obscure transaction amounts and addresses. A zero-day bug successful the codification enabled an attacker to manufacture a fraudulent pegout, a mechanics that moves litecoin from the MWEB furniture backmost to the main chain.
The malicious transaction fabricated a withdrawal of 85,034 LTC, creating an inflation vulnerability. Subsequently, non-updated nodes accepted the invalid transaction, and the attacker utilized it to redirect funds to third-party decentralized exchanges earlier developers could intervene.
The disruption, arsenic expected, stalled respective large mining pools and produced a impermanent concatenation split, with 2 competing versions of the blockchain operating simultaneously. Following the event, Bitcoin.com offered broad postmortem coverage, noting that developers moved rapidly to frost funds and coordinate a betterment response.
F2pool Steps in
Over astir 2 hours and 45 minutes, mining pools coordinated to enforce the valid concatenation done a reorganization, a process wherever a longer valid concatenation replaces the 1 containing invalid blocks. Onchain information from ltc.supply confirmed that F2pool mined each 13 blocks successful the winning chain, providing the consecutive proof-of-work needed to marque the valid mentation the definitive record.
By rapidly marshaling an overwhelming bulk of the network’s hash rate, the excavation efficaciously orphaned the attacker’s blocks earlier irreversible speech confirmations could beryllium finalized.
Analysts described the effort arsenic a “13-block chase” that helped the Litecoin web adjacent the divided and instrumentality to mean operation.
The Litecoin squad confirmed each morganatic transactions remained intact passim the incident. Litecoin Core v0.21.5.4 has since been released, addressing some the inflation bug that enabled the fraudulent pegout and the mining node stall that contributed to the disruption. The web is present operating normally.
English (US) 