Security firm Blockaid has flagged an ongoing exploit targeting Garden Finance, a cross-chain decentralized finance protocol. The attack has already drained roughly $450,000 across four different blockchain networks, according to Blockaid's monitoring systems.
How the exploit works
Blockaid's detection systems caught the exploit in real time. The attacker appears to be moving funds through multiple chains, likely to obscure the trail and convert stolen assets. The four chains involved were not named in the initial alert, but the incident underscores the risks inherent in protocols that operate across different blockchains.
Garden Finance has suffered repeated security breaches. The latest incident suggests the project's underlying code or infrastructure has systemic vulnerabilities that haven't been fully addressed. Blockaid's report did not specify whether the exploit used a known vulnerability or a novel attack vector.
Repeated security failures
This isn't the first time Garden Finance has been hit. The protocol has experienced multiple breaches in the past, raising questions about its security practices. Each incident erodes user confidence, and the cumulative effect could be severe for a platform that relies on trust to lock up user funds.
Cross-chain DeFi protocols are particularly exposed because they interact with multiple blockchains, each with its own security assumptions. A vulnerability in one bridge or smart contract can cascade across the entire system. Garden Finance's track record suggests it hasn't managed those risks effectively.
Impact on cross-chain DeFi trust
The exploit may further undermine trust in cross-chain DeFi protocols. Users already face risks from hacks, rug pulls, and smart contract bugs. When a protocol gets hit repeatedly, even loyal users start to question whether their funds are safe.
Blockaid's detection is a positive sign — it shows monitoring tools are catching attacks early. But detection alone doesn't prevent losses. The $450,000 figure may grow if the attacker continues to drain funds before the protocol can pause or patch.
Garden Finance has not yet issued a public statement about the exploit. The company's response in the coming hours will be critical. Users are likely watching for a clear plan to stop the drain, assess damages, and compensate victims. Without swift action, the damage to the protocol's reputation could far exceed the immediate financial loss.
