Arbitrum

Bitcoin

when

WEMIX

[Updated July 27, 2026, 2:16 UTC: Revised to reflect clarifications from a Garden Finance spokesperson.]Garden Finance said an independent solver’s off-chain database was compromised in an incident that prompted the cross-chain bridge and atomic swap protocol to temporarily take its app offline.On Sunday, Blockaid <a href="https://x.com/blockaid_/status/2081409252489298100" rel="noopener noreferrer nofollow">said</a> an attacker drained about $450,000 in USDT from Garden’s hash time-locked contracts (HTLC) on Ethereum, Base, Arbitrum and BNB Smart Chain. HTLCs are time-bound escrow contracts that Garden uses to facilitate atomic swaps between Bitcoin and assets on other networks. Blockaid described the exploit as ongoing and published addresses linked to the attacker and affected contracts.However, a Garden Finance spokesperson told Cointelegraph that neither the protocol nor its HTLC smart contracts had been compromised. The company said the attacker breached the off-chain database of an independent solver and inserted fraudulent transaction records, causing the solver to release funds for swaps that had not been funded by the counterparty.Garden said no user funds were lost or placed at risk and that the incident affected only solver-owned assets. The company is still confirming the total amount, assets and networks involved. It said services were paused as a precaution while the affected infrastructure was isolated and reviewed.Blockaid acknowledged Cointelegraph’s request for comments.&nbsp;<h2 id="garden-works-with-security-firms-to-trace-funds">Garden works with security firms to trace funds</h2>Garden said it is working with zeroShadow, Quantstamp and Blockaid to trace and recover the funds. The protocol expects to restore <a href="https://x.com/gardenfi/status/2081441973651804359" rel="noopener noreferrer nofollow">services</a> shortly, subject to completing security checks, but did not give a specific timeline.“Garden’s protocol and HTLC smart contracts were not compromised, and no user funds were lost or at risk,” the company told Cointelegraph, adding that the incident was isolated to the off-chain infrastructure of one solver in its network of independent solvers.The company also pointed to its recent SOC 2 Type II attestation as evidence of its investment in security and operational controls. Garden told Cointelegraph that its immediate priorities are securing the affected systems, tracing the solver’s funds and ensuring services resume only after the relevant reviews are completed.Related: <a href="https://cointelegraph.com/news/wemix-attacker-moves-724k-contract-breach" rel="noopener noreferrer nofollow">WEMIX says attacker moved about $724,000 after contract breach</a>The incident <a href="https://garden.finance/blog/garden-incident-report-october-30-2025" rel="noopener noreferrer nofollow">follows</a> an October 2025 breach in which an attacker stole about $11.4 million after compromising the operating environment of one of Garden’s solvers. Garden said that incident also did not affect its protocol contracts or put user funds at risk.Magazine: <a href="https://cointelegraph.com/features/crypto-coercion-attack-fake-police-raid" rel="noopener noreferrer nofollow">Inside the ‘fake police raid’ that forced a $1M Bitcoin transfer</a>

Garden Finance disables app as Blockaid reports $450,000 exploit

Table of Contents

Cointelegraph

Other articles published on Jul 27, 2026

Hoskinson says Bitcoin's crown is at risk if governance fails the quantum test

Lorenzo Protocol (BANK) Added to KRW Market

Crypto Market Holds Steady: Bitcoin at $65,000 as AAVE and ONDO Gain Momentum

Gold Price Forecast: XAU/USD Buyers Test Resistance as Mideast Tensions Ease and Oil Slumps

WEMIX Confirms Smart Contract Compromise After $6.25 Million in Illegally Minted Tokens Were Moved

Hanpass Stablecoin Push Signals South Korea Fintech Move

Join our free newsletter for daily crypto updates!