Garden Finance Cross-Chain Bridge — July 2026 Solver Database Exploit

2023-12-01

Garden Finance launched as a cross-chain atomic swap protocol, developed by former RenBTC team members including co-founder Jaz Gulati.

2025-10-30

An attacker gained unauthorized access to the operating environment of one of Garden Finance's largest independent solvers, draining approximately $11.4 million in crypto assets. EY forensic investigation later confirmed suspicious SSH access from IP addresses in Japan and China. ZachXBT attributed the attack to the DPRK-affiliated DangerousPassword group.

2025-10-31

Garden Finance publicly disclosed the October 2025 breach, temporarily shut down its application, and offered a 10% bounty to the attacker for return of funds.

2026-06-02

ZachXBT published analysis on X alleging that over 80% of Garden Finance's recent fee revenue — 38.86 BTC collected over 12 days — derived from laundering funds stolen in the February 2025 Bybit hack, attributed to the Lazarus Group. Co-founder Jaz Gulati disputed the claim.

2026-07-26

Blockaid detected an active, ongoing exploit on Garden Finance's HTLC contracts at approximately 9:30 PM UTC, flagging the attacker address (0x25b...6999) and approximately $450,000 in USDT drained across Ethereum, Base, Arbitrum, and BNB Smart Chain.

2026-07-26

Garden Finance took its application offline as a precaution and confirmed the exploit originated from the compromise of an independent solver's off-chain database. The team engaged zeroShadow, Quantstamp, and Blockaid to assist with asset tracing and recovery.

2026-07-27

Garden Finance issued a public statement confirming the breach was limited to the solver layer, that HTLC smart contracts were not compromised, and that no user funds were at risk. The team stated it was still verifying the total amount lost and provided no timeline for service restoration.