Garden hacked for $11M after bridging Lazarus’ loot
The post Garden hacked for $11M after bridging Lazarus’ loot appeared on BitcoinEthereumNews.com.
Yesterday’s $11 million hack of bitcoin (BTC) bridge Garden was met with little sympathy from the crypto community, following allegations of its profiting from the proceeds of other hacks. Acknowledging the incident, the team insisted that the protocol itself wasn’t hacked. Instead, one of its “solvers” was compromised, with losses “limited to the solver’s own inventory.” However, on-chain evidence points to the solver being run by the Garden team and blockchain investigators have accused the team of attempting to “downplay the incident” in order to appear “decentralized.” we’ve detected a compromise involving one of garden’s solvers. the app is temporarily offline while we complete a full investigation. the impact is limited to the solver’s own inventory — user funds and garden protocol are not at risk. we’ll share updates as soon as we have… — Garden 🌸 (@gardenfi) October 30, 2025 Read more: DeFi projects under fire for inflated TVL and murky lending loops According to Garden’s docs, solvers act as market makers to facilitate bridging BTC and its wrapped varieties across chains. One of these solvers likely suffered a private key compromise. The resulting losses totalled around $11 million across Ethereum, BSC, and Solana. Tanuki42, an investigator at zeroShadow, attributed the attack to “a DPRK-affiliated group known as DangerousPassword.” They identified over $2 million of losses on Solana as originating from last month’s $41 million hack of Swissborg. Read more: DeFi security researcher implicated in $50M Radiant Capital hack As to the identity of the solver, which the team claims isn’t them, Tanuki42 and fellow blockchain investigator ZachXBT point to on-chain links which suggest otherwise. “Backtracing the initial gas funding,” Tanuki42 connected the compromised solver to REN and Keeper DAO addresses, which share team members with Garden. Meanwhile, ZachXBT highlighted an on-chain message apparently sent by the Garden deployer…
Filed under: News - @ October 31, 2025 5:29 pm