Garden Finance Halts App After $450K HTLC Exploit
Garden Finance took its app offline after Blockaid detected an ongoing exploit of its HTLC contracts, draining $450,000 in USDT from Ethereum, Base, Arbitrum, and BNB Chain. The protocol is investigating unusual activity while the attacker remains unidentified.
Quick Take
Attacker drained $450K USDT from Garden’s HTLC contracts on four chains.
Blockaid reported exploit, but vulnerability details remain undisclosed.
Garden Finance disabled its app and launched a full investigation.
Incident follows an October 2025 breach that stole $11.4M from a solver.
Market Impact Analysis
BearishExploit on a cross-chain bridging protocol with funds drained may cause short-term negative sentiment and caution among users of similar services.
Speculation Analysis
Key Takeaways
- An attacker exploited hash time-locked contracts (HTLCs) on Garden Finance, siphoning $450,000 in USDT across Ethereum, Base, Arbitrum, and BNB Smart Chain.
- Blockchain security firm Blockaid detected the ongoing exploit but did not disclose the specific vulnerability or whether user funds were at risk.
- Garden Finance immediately disabled its application and initiated a full investigation into the unusual activity on Sunday.
- This breach follows a $11.4 million attack on Garden's solver infrastructure in October 2025, raising fresh security concerns.
What Happened
Garden Finance, a cross-chain bridging and atomic swap protocol, disabled its application after a security incident. Blockchain security firm Blockaid reported an attacker exploited hash time-locked contracts (HTLCs) on Sunday. The exploit drained approximately $450,000 in USDT. HTLCs are time-bound escrow contracts used by Garden to facilitate atomic swaps between Bitcoin and assets on other networks. The attack targeted contracts on Ethereum, Base, Arbitrum, and BNB Smart Chain. Garden acknowledged unusual activity and launched a full investigation. The protocol’s app remains offline as the investigation continues. This is the second major security incident for Garden within six months.
The Numbers
Attackers made off with $450,000 in USDT across four major blockchain networks. The exploit occurred on Sunday, according to Blockaid’s alert. The targeted contracts were HTLCs, which underpin Garden’s cross-chain swaps. The breach follows an October 2025 incident where $11.4 million was stolen from a compromised solver—though protocol contracts remained unaffected. The total value locked (TVL) in HTLC-based protocols could face increased scrutiny. No user fund risks have been confirmed in the current attack.
Why It Happened
Blockaid labeled the exploit as ongoing when it raised the alarm but did not reveal the vulnerability. HTLCs, while critical for trustless swaps, have inherent complexity that can introduce security gaps. The attack may stem from a flaw in the contract logic or key management. Garden’s infrastructure had already been under pressure after a previous solver compromise in October. Repeated breaches suggest potential systemic weaknesses in operational security or code auditing. The lack of disclosed details keeps the community guessing about the root cause.
Broader Impact
This incident may trigger caution around HTLC-based protocols, especially those handling cross-chain swaps. With over $11.8 million lost across two attacks, Garden’s reputation faces a heavy blow. The exploit also highlights the risks of relying on complex smart contract designs without robust monitoring, potentially pushing protocols toward simpler architectures or enhanced insurance mechanisms.
What to Watch Next
- Garden’s investigation results: Details on the exploit vector and whether user funds were directly affected will determine the protocol’s recovery.
- Potential HTLC vulnerabilities: Security researchers may audit similar contracts across other protocols to prevent copycat attacks.
- The attacker’s on-chain movements: Tracking the drained USDT could lead to identification or recovery, though typical obfuscation methods may delay efforts.
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.
