Garden Finance disables app as Blockaid reports $450,000 exploit
Summary
Garden Finance took its app offline after Blockaid reported an exploit against its hash time-locked contracts (HTLCs) on Ethereum, Base, Arbitrum, and BNB Smart Chain. Blockaid said an attacker drained about $450,000 in USDT from these contracts and flagged the incident as ongoing, though it did not identify the vulnerability or confirm whether user funds were affected. Garden said it detected unusual activity, launched a full investigation, and temporarily disabled the app. The HTLCs are used for atomic swaps between Bitcoin and other chains. The incident comes after an October 2025 breach in which about $11.4 million was stolen from one of Garden’s solvers, which Garden said did not affect protocol contracts or user funds.
