₿ Crypto

Garden Finance App Offline as Attacker Drains $450k USDT via HTLC Exploit

Garden Finance disabled its app after an attacker exploited a vulnerability in its HTLC contracts to steal $450,000 worth of USDT across four blockchains, according to Blockaid.

📅 July 27, 2026 🕐 1 min read

1 assets impacted (Crypto). Net bias: 0 Bullish, 0 Bearish, 1 Neutral. Strongest signal: USDT → 3/10 (85% confidence).

📊 Affected Assets (1)

USDT

Neutral 🤖 85%

📅 Short-term 🌍 Global · Explicit

The article reports a $450,000 USDT drain from Garden Finance’s HTLC contracts across four blockchains. This exploit is isolated to a single DeFi application and does not threaten USDT’s peg or solvency. The amount is small relative to USDT’s market cap, so price impact is negligible, leaving sentiment neutral.

Catalysts

• Attacker drained $450,000 USDT from Garden Finance's HTLC contracts

Risk Factors

• No evidence of broader threat to USDT's peg or solvency
• Quick containment by Garden Finance reduces contagion risk

▼ Show FAQ (2) ▲ Hide FAQ

How does this exploit impact USDT's price?

USDT remains pegged to $1; the $450k loss is negligible in the context of USDT's multi-billion dollar market cap, so no price impact is expected.

Could this event trigger a sell-off in other DeFi tokens?

The exploit is isolated to Garden Finance, so a broad sell-off is unlikely. However, it may increase scrutiny on DeFi projects using HTLC contracts.

🎯 Key Takeaways

Blockaid identified a $450,000 USDT drain from Garden Finance’s HTLC contracts across four blockchains.
Garden Finance took its application offline, presumably to investigate and mitigate the exploit.
The attack targeted HTLC (Hashed TimeLock Contract) functionality, a mechanism often used in cross-chain and atomic swaps.
While the financial loss is moderate, the incident underscores persistent vulnerabilities in DeFi smart contracts.
No evidence suggests the exploit affects the broader stablecoin market or underlying blockchain networks.
Other DeFi protocols that implement similar HTLC contracts should audit their code for comparable flaws.

📝 Executive Summary

Blockaid said an attacker drained about $450,000 in USDT from Garden Finance’s HTLC contracts across Ethereum, Base, Arbitrum and BNB Smart Chain.

❓ FAQ

What happened to Garden Finance?

Garden Finance disabled its app after an attacker exploited a vulnerability in its HTLC contracts to steal about $450,000 in USDT, as reported by Blockaid.

Which blockchains were affected?

The exploited HTLC contracts were on Ethereum, Base, Arbitrum, and BNB Smart Chain, though the compromise was at the application level, not on the underlying networks.

Is USDT safe?

The exploit targeted a specific DeFi protocol’s smart contracts, not the USDT stablecoin itself. There is no indication of a loss of peg or broader threat to USDT.

📰 Related Articles

🏷️ Tags

📰 Source

🔗 View Original Article