A zero-day in Litecoin's MWEB transaction validation allowed attackers to craft malformed transactions that non-updated nodes accepted, enabling unauthorized peg-outs. Fixed via 13-block chain reorganization.