Garden Finance Hack

Reported loss $450K
Arbitrum Base BNB Chain Ethereum
Other

What happened

On July 26, 2026, Garden Finance paused its application after an attacker compromised an independent solver's off-chain database. Cointelegraph reported that fraudulent swap records caused the solver to release about $450,000 in USDT from HTLCs on Ethereum, Base, Arbitrum, and BNB Smart Chain. Garden said its protocol contracts and user funds were not compromised; the affected assets belonged to the solver.

How it happened

  1. An attacker compromised an independent solver's off-chain database.
  2. The attacker inserted records for swaps that had not been funded by the counterparty.
  3. The solver trusted those records and released its USDT through HTLC settlements on four EVM networks.
  4. Garden paused the application while isolating the affected infrastructure and tracing the solver-owned funds.

Protocol details

Classification Bridge / Frontend & Infrastructure
Protocol Type Cross Chain Bridge
Category Bridge Hack
Implementation language Solidity
Protocol links Website @gardenfi

Market Context at Time of Hack

Token Price at Hack $0.1225
Market Cap at Hack $1.6M
Reported loss / token market cap 28.20%
Token Categories
Decentralized Exchange (DEX) Exchange-based Tokens Decentralized Finance (DeFi) Arbitrum Ecosystem Ethereum Ecosystem BTCfi Protocol
Protocol Links
Telegram

Security review history

Evidence

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes