Litecoin zero-day MWEB bug triggered 13-block reorg enabling double-spends; NEAR Intents covered $600k in cross-chain exposure with no user losses.
Security & Exploits ·
A zero-day bug in Litecoin's MWEB implementation triggered a 13-block chain reorganization, creating conditions for invalid transactions and double-spends across connected protocols. The disruption lasted several hours and generated double-spend activity that trading venues were advised to audit. NEAR Intents faced approximately $600k in exposure through cross-chain transactions affected by the reorg.
NEAR Intents announced it would cover all losses incurred by its users, ensuring no financial impact despite the incident. The protocol's protection mechanism absorbed the full exposure amount, preventing user losses from the Litecoin disruption. Trading platforms holding or facilitating Litecoin transactions were encouraged to review their holdings and transaction history to identify and address double-spend attempts during the affected period.
What remains unclear is the scope of double-spending activity across other protocols and platforms beyond NEAR Intents, whether other cross-chain services required similar loss coverage, and the timeline for a permanent patch to the MWEB vulnerability.