Sunday brought a massive $450,000 Tether (USDT) drain to Garden Finance. Security researchers at Blockaid detected the active threat before anyone else realized the danger. So, the developers made a swift decision to disable the app. The exploit targeted specific vulnerabilities they couldn’t immediately account for.
According to a July 26 public alert from Blockaid, the attack hit the protocol’s hash time-locked contracts (HTLC). They handle atomic swaps between Bitcoin and alternate networks. The coordinated breach spanned four separate environments. Hackers successfully compromised contracts across Ethereum, Base, Arbitrum, and BNB Smart Chain.
Garden Finance acknowledged the situation shortly after the alert went live. They confirmed detecting unusual activity within their infrastructure.
Operations stopped entirely.
An internal investigation remains active today. Blockaid published the wallet addresses linked to the attacker. But they haven’t detailed the technical flaw. It isn’t clear exactly whose funds the hackers made off with. Both companies eventually acknowledged media requests from Cointelegraph. Neither entity provided expansive statements to verify the total scope.
Honestly, Garden Finance has faced severe breaches before. They suffered an $11.4 million loss back in October 2025. Attackers targeted an off-chain solver environment to extract that value. On-chain smart contracts stayed completely secure during that previous attack.
On-Chain Escrow Breaches Expose Cross-Network Fragility
The July 2026 attack reveals a completely different vector. Last year’s attackers went after off-chain infrastructure. Now, they’ve directly manipulated the on-chain HTLC contracts. Developers clearly struggle to secure time-bound escrows across disparate networks simultaneously.