NewsHK

Garden Finance app taken offline after $450,000 USDT drain from HTLC contracts

7/27/2026

Cross-chain DeFi protocols have been a recurring attack surface through this cycle, and the pattern held again.

Blockaid reported that an attacker drained approximately $450,000 in USDT from Garden Finance by exploiting the protocol's hash time-locked contracts (HTLCs), the locking mechanisms that hold funds in escrow during atomic swaps.

Garden Finance disabled its application in response. What moved on-chain The exploit ran across four networks: Ethereum, Base, Arbitrum, and BNB Smart Chain, according to Blockaid.

That breadth is worth reading carefully. A single-chain attack typically points to one weak deployment.