Security Breach: Garden Finance Shuts Down App Following $450,000 Exploit

Garden Finance has taken its application offline following a major exploit reported by security firm Blockaid, which resulted in the theft of approximately $450,000 in USDT. The attacker successfully targeted the protocol's Hash Time-Locked Contracts (HTLC) across several major networks, including Ethereum, Base, Arbitrum, and BNB Smart Chain.

This breach highlights the ongoing vulnerabilities within cross-chain bridging and atomic swap protocols. As the attacker exploited the time-bound escrow mechanisms used to facilitate Bitcoin swaps, the incident serves as a stark reminder of the security risks inherent in multi-chain interoperability within the DeFi space.

HTLCs are time-bound escrow contracts that Garden Finance utilizes to facilitate atomic swaps between Bitcoin and assets on other networks. While Blockaid's initial alert described the exploit as an ongoing event, the specific vulnerability has not yet been disclosed, and it remains unclear whether the incident has impacted broader user funds beyond the initial reported amount.