Garden Finance halts app operations following solver database breach

The exploit, detected by security firm Blockaid, targeted hash time-locked contracts (HTLCs) across Ethereum, Base, Arbitrum, and the BNB Smart Chain. According to Garden, the attacker manipulated internal records within the solver’s infrastructure to trigger fund releases for swaps that lacked corresponding counterparty deposits. This breach of the solver’s private database resulted in the loss of assets owned exclusively by that participant.

Garden has enlisted zeroShadow, Quantstamp, and Blockaid to track the stolen funds and conduct a thorough security audit. While the company maintains a SOC 2 Type II certification, this event marks the second time an independent solver’s environment has been compromised, following an $11.4 million incident in October 2025. Services are expected to remain offline until engineers verify that all infrastructure vulnerabilities have been addressed.