Cross-chain bridge and atomic swap protocol Garden Finance temporarily disabled its application on Sunday after an attacker compromised an independent solver’s off-chain database and inserted false swap records that triggered the release of roughly 450000 dollars in USDT. The funds left hash time-locked contracts on Ethereum, Base, Arbitrum and BNB Smart Chain. Garden’s core protocol and the smart contracts themselves were not breached. Only assets belonging to the affected solver were lost. No user funds were taken or placed at risk.

The company paused services as a precaution while isolating and reviewing the compromised infrastructure. It is working with security firms to trace the stolen assets and support recovery. Services are expected to resume once security checks are complete, though no precise timeline has been set. Garden holds a recent SOC 2 Type II attestation reflecting its security and operational controls.

The episode follows a separate incident in October 2025 in which an attacker extracted about 11.4 million dollars from the operating environment of another solver. That earlier event likewise left the protocol contracts and user balances untouched.