Litecoin's MimbleWimble Extension Blocks (MWEB) is an optional privacy layer. It went live in May 2022 and hides transaction amounts for coins moved into it. Because it lets users hide transaction details, several regulated exchanges in South Korea dropped LTC in June 2022, citing anti-money-laundering reporting rules. The newest development is a security one. In March and April 2026, an attacker exploited a validation bug in MWEB. Litecoin developers then shipped a series of Litecoin Core 0.21.5.x patches, the latest dated 12 September 2026, which add stricter MWEB consensus rules through soft forks.
What changed in 2026
The March 2026 inflation bug
A Litecoin Core developer postmortem by David Burkett was published on 28 April 2026 and covered by Bitcoinist. According to it, a block producer exploited a missing check at block connection in March 2026. At block height 3,073,882, an MWEB input worth no more than 1.2084693 LTC was paired with fake commitment data. That input backed a peg-out of 85,034.47285734 LTC to the transparent chain.
The postmortem describes the response:
- Emergency releases: Litecoin Core 0.21.5 and 0.21.5.1 went to miners. Version 0.21.5.1 added a historical exception for the exploit block and temporarily blocked spending of the three outputs that held the funds.
- Recovery: The attacker signed a recovery transaction in exchange for an 850 LTC bounty. Litecoin creator Charlie Lee bought 850 LTC to cover the gap. The full amount was re-pegged into MWEB at block 3,078,098 and that output was frozen.
- Losses: The postmortem reports no confirmed user funds lost in the March incident.
The April 2026 chain split
On 25 April 2026, starting at block 3,095,931, the attacker reused the same exploit path. Upgraded nodes rejected the malformed data, but a bug in how they handled mutated blocks stalled upgraded miners. Meanwhile, miners on older software extended an invalid chain through block 3,095,943. That made 13 bad blocks, which the valid chain later overtook and reorganised out. The Block, citing Aurora Labs CEO Alex Shevchenko, reported the fork lasted more than three hours.
Litecoin Core 0.21.5.4 fixed the stall. Some cross-chain swap services had processed peg-outs from the invalid blocks before the reorganisation. The postmortem lists one swap of 11,000 LTC for 7.78814476 BTC, and says final third-party loss figures were still being collected.
The follow-up patches
The Litecoin Core release page on GitHub lists these releases:
| Release | Date | MWEB change |
|---|---|---|
| v0.21.5.4 | 26 Apr 2026 | Fixes to input commitment checks and kernel fee overflow; marked as a required upgrade |
| v0.21.5.5 | 6 May 2026 | Further validation of inputs, peg-ins, HogEx data, kernel fees and lock heights |
| v0.21.5.6 | 2 Aug 2026 | Soft-fork rule at mainnet height 3,154,440: blocks with a peg-out-signalling kernel but an empty peg-out list are rejected |
| v0.21.5.8 | 12 Sep 2026 | Soft-fork rule at mainnet height 3,172,640: kernels that signal extra data but carry an empty payload are rejected; miners and pools told to upgrade before activation |
The v0.21.5.8 notes say v0.21.5.7 was a security fix sent only to mining pools.
MWEB usage
Reported MWEB balances reached new highs after the incident. CriptoNoticias, citing the MWEB Explorer tracker, reported 466,961 LTC held in MWEB on 21 July 2026. CryptoTicker reported more than 563,000 LTC on 7 October 2026, describing it as a record.
How MWEB works
The design is set out in Litecoin Improvement Proposal 3 (LIP-0003), written by Andrew Yang, David Burkett and Charlie Lee.
Extension blocks
MWEB transactions live in extension blocks, a separate data layer that runs alongside Litecoin's main-chain blocks. Using it is optional. Ordinary Litecoin transactions work as before.
Peg-in and peg-out
- Peg-in: A main-chain transaction sends LTC to a special address, which creates the same amount of coins inside MWEB.
- Peg-out: Coins inside MWEB are destroyed and released to a regular Litecoin address. LIP-0003 requires peg-out outputs to wait six blocks before they can be spent. The authors noted the wait may need to be longer.
Wallet documentation tells users to expect six confirmations in both directions. Transfers that stay inside MWEB do not have this wait.
What MWEB hides, and what it does not
Hidden:
- Amounts: These are hidden using Pedersen commitments.
- Addresses: MimbleWimble transactions have no addresses in the ledger, so sender and receiver are not linked publicly in the same way.
- History: Cut-through removes intermediate transactions, so new nodes check the current set of unspent outputs rather than the full history.
Visible:
- Peg-in and peg-out amounts, because they are ordinary main-chain transactions.
- The destination address and amount recorded for a peg-out.
- Transaction fees, which are public in kernels.
In practice, an observer can see coins entering and leaving MWEB, but not what happens to them inside.
Using it
- Wallets: Litecoin Core v0.21.2, released in May 2022, added full node, wallet and mining support for MWEB. v0.21.3 added peer-to-peer messages for light clients.
- Addresses: Mobile wallets with MWEB support use receiving addresses that begin with
ltcmweb1. Standard Litecoin addresses begin withltc1. - Before you move funds: Check whether the service you plan to send to accepts coins that come from MWEB.
How Litecoin patched its MWEB exploit
Step through the 2026 MWEB exploit, from the first fake peg-out to the latest soft-fork release, to see what each fix changed.
- March 2026Inflation bug exploiteddone
At block height 3,073,882 a block producer paired an MWEB input worth no more than 1.2084693 LTC with fake commitment data to back a peg-out of 85,034.47285734 LTC. Emergency releases 0.21.5 and 0.21.5.1 went to miners and blocked spending of the three outputs that held the funds.
- March 2026Funds recovered and frozendone
The attacker signed a recovery transaction for an 850 LTC bounty, which Charlie Lee covered by buying 850 LTC. The full amount was re-pegged into MWEB at block 3,078,098 and frozen. The postmortem reports no confirmed user funds lost in this incident.
- 25 Apr 2026Exploit reused, chain splitsdone
Starting at block 3,095,931, the attacker reused the same exploit path. Upgraded miners stalled, and miners on older software extended an invalid chain through block 3,095,943: 13 bad blocks, later reorganised out. The Block reported the fork lasted more than three hours.
- 26 Apr 2026v0.21.5.4: required upgradedone
Fixed the stall, input commitment checks and a kernel fee overflow. One swap service had already processed 11,000 LTC for 7.78814476 BTC from the invalid blocks.
- 28 Apr 2026Postmortem publisheddone
David Burkett's developer postmortem set out both incidents. It said final third-party loss figures were still being collected.
- 6 May 2026v0.21.5.5: wider validationdone
Further validation of inputs, peg-ins, HogEx data, kernel fees and lock heights.
- 2 Aug 2026v0.21.5.6: first soft forkdone
From mainnet height 3,154,440, blocks with a peg-out-signalling kernel but an empty peg-out list are rejected.
- 12 Sep 2026v0.21.5.8: second soft forkdone
From mainnet height 3,172,640, kernels that signal extra data but carry an empty payload are rejected. Miners and pools were told to upgrade before activation. v0.21.5.7 was a security fix sent only to mining pools.
This shows only the 2026 incident and patch releases reported in the article. It does not show final third-party losses, whether the soft forks have activated, or whether MWEB is safe to use now.
Activation in May 2022
The Litecoin Foundation reported that miner signalling passed the 75% threshold on 2 May 2022. MWEB then locked in at block 2,257,920. The v0.21.2 release notes set mainnet activation at block 2,265,984, expected on 19 May 2022. Contemporary reports, citing Charlie Lee and the Litecoin Foundation, dated activation to 19–20 May 2022 depending on time zone.
Why some exchanges delisted LTC
South Korea, June 2022
The Block reported in June 2022 that two major South Korean exchanges announced they would drop Litecoin because of MWEB:
- The first ended support on 20 June 2022 and gave users a month to withdraw. It said MWEB made it impossible to keep the transaction records that anti-money-laundering rules require.
- The second stopped LTC deposits from 8 June 2022 and allowed withdrawals until 25 July 2022. It cited the revised Act on Reporting and Use of Specific Financial Transaction Information and its rules on "virtual assets with high anonymity".
Citing the outlet 8BTC, The Block also reported that three other Korean exchanges told users they would remove Litecoin markets, bringing the total to five.
Thailand
Thailand's Securities and Exchange Commission has banned licensed digital asset operators from providing "privacy coin services" since 1 April 2022, according to a 26 April 2022 summary by law firm Tilleke & Gibbins. The ban covers coins that can conceal the transferor, the transferee or the transfer amount. Operators that already offered such services could continue if customers disclosed the required transaction information.
The rule predates MWEB's activation and covers privacy features in general, not Litecoin by name.
Litecoin as a testbed for Bitcoin upgrades
Litecoin has run Bitcoin-related upgrades before Bitcoin did:
- SegWit: Litecoin activated Segregated Witness on 10 May 2017 at block 1,201,536, CoinDesk reported. Bitcoin activated it in August 2017.
- Lightning: About two hours after Litecoin's SegWit activated, Blockstream's Christian Decker opened a Lightning channel between Zurich and San Francisco and sent 0.00000001 LTC.
There is no adopted plan to add MWEB to Bitcoin.
