Garden Finance Takes App Offline Following $450,000 HTLC Exploit

Security Breach Impacts Multi-Chain HTLC Infrastructure

Blockchain security firm Blockaid has disclosed an active exploit targeting Garden Finance’s hash time-locked contract infrastructure, resulting in approximately $450,000 in USDT being drained across four major networks. The affected chains include Ethereum, Base, Arbitrum, and BNB Smart Chain. Garden Finance operates as a cross-chain bridging and atomic swap platform that leverages HTLCs—time-bound escrow mechanisms—to enable users to exchange Bitcoin for assets on other blockchains without requiring centralized intermediaries.

According to Blockaid’s investigation, the vulnerability remained actively being exploited at the time of the report, though the firm withheld technical details about the specific weakness that was leveraged. The security researchers shared blockchain addresses associated with the attacker and the compromised smart contracts. Notably, Blockaid did not clarify whether the incident directly impacted user-held funds or was isolated to liquidity pools within the protocol itself.

Rapid Response and Historical Context

Garden Finance responded by immediately taking its application offline and initiated a comprehensive security investigation after detecting the anomalous activity. The protocol confirmed it was cooperating with security researchers and media outlets investigating the incident.

This represents the second significant security event affecting Garden Finance within twelve months. An earlier breach in October 2025 exposed the platform to a substantially larger loss, when an attacker obtained approximately $11.4 million through compromising the computing environment of one of Garden’s solver infrastructure components. The platform subsequently stated that breach had not compromised its core protocol contracts or endangered user assets directly.

Broader Implications for Cross-Chain Technology

The recurring nature of these security incidents highlights persistent challenges within cross-chain protocols as they operate complex systems designed to facilitate trustless transactions between disparate blockchain ecosystems. Atomic swap mechanisms and time-locked contracts serve as foundational infrastructure for permissionless asset transfers between Bitcoin and other blockchain networks—a critical function for users seeking alternatives to centralized bridge services.

When vulnerabilities emerge in these systems, they can erode market confidence in cross-chain solutions generally and impact the entire ecosystem that depends on decentralized interoperability infrastructure.

These repeated exploits underline why robust security practices remain essential to widespread adoption of cross-chain and atomic swap protocols across the crypto market.

Source: Blockaid, via Cointelegraph. Not financial advice.