Garden Finance took its application offline this week after security firm Blockaid flagged an exploit that drained roughly $450,000 from the protocol's smart contracts across multiple blockchains.
What Happened
According to Blockaid, an attacker managed to siphon approximately $450,000 worth of Tether (USDT) from Garden Finance's hash time-locked contracts, or HTLCs. The security firm reported that the funds were pulled from contracts deployed on four separate networks: Ethereum, Base, Arbitrum, and BNB Smart Chain.
In response to the alert, Garden Finance moved quickly to disable its app, a common defensive step aimed at preventing further losses while the team investigates the root cause of the breach.
A rapid shutdown is often the only line of defense once an exploit is already in motion.
HTLCs are a core building block in cross-chain and atomic swap systems, using cryptographic conditions and time limits to coordinate transactions between parties. Because they hold funds during the settlement process, they can become attractive targets when a flaw is present.
Why It Matters
Cross-chain protocols have repeatedly featured among the most heavily targeted corners of decentralized finance, as bridging and swapping mechanisms introduce additional complexity and potential attack surfaces. An exploit spanning four chains underscores how a single vulnerability can cascade across an entire deployment.
For users, the immediate concern is the safety of remaining funds and the timeline for any restoration of service. Protocols in this situation typically follow a familiar playbook that includes:
- Pausing affected contracts and front-end access
- Coordinating with security researchers to trace stolen funds
- Publishing a post-mortem detailing the vulnerability
- Outlining any plans for user compensation
At the time of the report, Garden Finance had not disclosed a full breakdown of the exploit or whether affected users would be reimbursed. The incident adds to a steady stream of DeFi security failures that continue to challenge confidence in the sector's smart contract infrastructure.