# Garden Finance Date:: 2025-10-30 Amount Stolen:: $12,371,369 Tags:: 🍆 --- ## Details A single private key to a "solver" was compromised. The solver is the one that processes all the transactions. It's key lives on servers and in code and stuff. Root cause malware, obviously. Exact which type of malware and which idiot on the team of idiots ran the malware is TBD. The team has publicly taken the stance that it was a "3rd party" Spoiler: it was not a "3rd party" they just realized they fucked up bc this hack reveals they are a fully centralized and personally processing transactions, a vast amount of which are threat actors laundering money. ## Further Reading - https://x.com/gardenfi/status/1983949462507811095 - https://x.com/QuillAudits_AI/status/1983910001350783316 - https://x.com/zachxbt/status/1983959869674942662 - https://x.com/punkaj__/status/1983952241578184907 - https://x.com/zachxbt/status/1983985771297350115 - https://x.com/tanuki42_/status/1984002768131252417 - https://x.com/mrsThreshold/status/1984003739452371001 - https://x.com/zachxbt/status/1978359465020727344 ## Onchain - 0x3fdee07b0756651152bf11c8d170d72d7ebbec49 - Victim - 0x98bcc6c34a489cefdd9dfa8d792cfefb02ea2d12 - Direct Theft - 0x89b93c99576d7b601abb48540ed0b0c223fc1f76 - Direct Theft - 0x27133b7e7910d506ea8ec342f5bec0325b2d5876 - Direct Theft - 0x862f02fAEA46d8455a6784665d1424676ed99701 - Direct Theft - WZy4xxpqktWa1b6MPMRiWsD487CT8mDcapB6GufBJCH - Direct Theft - 0x3f11427c2423294e9ffac420564a0084c50a7add4a9f3f912167b3831be94e5a - Direct Theft, Sui - 0x0699307b44511594126cac9b89e6f1ee6438b985ab61fa529e211d2d46c90bdc - Direct Theft, Starknet - bc1qwpfllj4xv8w8ce338unna3du2t3943gdvrtsv9 - Direct Theft - 0x02555d446cb6dd21f33f859eba33c19e9e55d525 - Theft - 0xe84f5c84ca18eaa0d433ff22d05aa449cd86846a - Theft - 0x0e06a3b2114981dee5132a5cd192be26c60c6efc - Theft - 0x940cd2ec3f4bd207b7839cafbc006ec73d910a44 - Theft - 8YB2rPKvL2FAGYGuXayi27nF3LyynBF7tqoXCJHrEiWq - Theft - ALkCH6qD8X9k9fCHgDCXeZQEzgLibpbnLLD5W4pcesPh - Theft - GB2f9WSu4MKwqngGGXbqwih6h9nohs2BurVtfHdfkpnL - Theft - 0x95F0564879D5e33000d53107ADaeA6809aaa3838 - Tornado Cash Depos; 2025-11-07 1910 ETH; 2026-01-25 2026-01-26 2 ETH - 0x7c1cf2f256d2e83dee5ae15e7ac0f7f6197e780b - Tornado Cash Depos; 2025-11-10 8 ETH; 2025-11-10 400 BSC + 40 BSC; overlaps with Singularity/Request - 0xa9a166febace09fd620a3b85cbc6d40e535fbdf1 - Tornado Cash Depos; 2025-11-13 525 ETH - 0x7d76ee241512d1b2db5a7e09fd04f5da71b31369 - Tornado Cash Depos; 2025-11-07 10x100 BSC - 0x3771CEc8C6e05E9428Dd72095c51Ac514bDc837A - Tornado Cash Depos - 0x5Ca008507dD05ce0130461f9E9dF2A5edeA994B3 - Tornado Cash Depos - 0x6e65628d44b3282a812715e36203e922c69bff6e - Post-TC - 0xc8e87472e9e061b04a0753251f77287528977675 - Post-TC - 0x01f17d672712f599a515988ac2ee93f8b028c34f - Post-TC - 0x557043eb98ed98d541e6c1fb8718e6595e99296c - Post-TC - 0x6a7ac163b801ee0c26d2eda04f0c0fb96023ff5e - Post-TC - 0x0be734566a936f7b4f785e65b91eac724aad7a18 - Post-TC - 0x17a05a675e02bf9f8376e17a71ceb134b9e5a642 - Post-TC - 0x9bd0baf7afe069c9610ce22103cdf56934a228b9 - Post-TC - [Request/Snet](./request-singularity.md) - 0x5c6de8f14526a0111e853febf9f4fc74a3a3eb7d - BSC Tornado Withdrawals (200 BSC) - 0xde28afaadb6829cd150544bbdc32b4f6b88685ad - BSC Tornado Withdrawals (120 BSC) - 0x0ee23d24e7db7c4cd2befc43f431cdb6af20db2e - BSC Tornado Withdrawals (20 BSC) - 0x0ae52fea982168021ebae797bed7fbcc157ccc89 - Tornado Cash Withdrawals (0.1 ETH) - 0xe9256362abbe97f149c4d1ea347e122a487f1de5 - Tornado Cash Withdrawals (1 ETH) - 0x58aa8a7ef5759cbf814a6ee2f041b8094bbfd75f - Tornado Cash Withdrawals (1 ETH) - 0x65b0d8818186f58f004d74383372f70718fa4fc7 - Tornado Cash Withdrawals (1 ETH) - 0x1865ca2f5ae1e77f34d00336f89c9be213cdaac9 - Tornado Cash Withdrawals (2 ETH) - 0x31bbd72ed782a845ec8f00269740106a634e87ec - Tornado Cash Withdrawals (11 ETH) - 0x3653904f32679b1f3bdcff3e8da596d0a97991f1 - Tornado Cash Withdrawals (13 ETH) - 0xf8b514a5d663ad079f7e9e17df4c59f9e1bd1a8c - Tornado Cash Withdrawals (200 ETH) - 0x5ce92163fd1ebbc43631ad9ceba6e8dab4b8e7be - Tornado Cash Withdrawals (100 ETH) - 0x5a3fa58b2a7fb286af6e9563575d1309ccee1151 - Tornado Cash Withdrawals (100 ETH) - 0xea691a99e42fd312d997aaa6967bd0d0a3431898 - Tornado Cash Withdrawals (110 ETH) - 0x67aa1df4b8c0374e844ecd63978cceb46c51f654 - Tornado Cash Withdrawals (100 ETH) - 0x357ffc88300952ce99085ac7a4e31af9cf46b8e9 - Tornado Cash Withdrawals (100 ETH) - 0x6c4f805335e6b91350ff291abc1c045971c2696f - Tornado Cash Withdrawals (100 ETH) - 0xac741f9f2a7b18991222d66b3a78c2e19541e38e - Tornado Cash Withdrawals (100 ETH) - 0xea5f017ceaa2f4fe86a0c1abf1a0c87fb0e5d7fc - Tornado Cash Withdrawals (100 ETH) - 0xefe1bd181106d42a02550757408ed77870a4f3f6 - Tornado Cash Withdrawals (100 ETH) - 0x05068582a187e2d6361c8c9e35f5bb266441a3e8 - Tornado Cash Withdrawals (100 ETH) / Railgun Depos (100 ETH) - 0x76551f89a7246608e493b28cabc8a6f8cf260df0 - Tornado Cash Withdrawals (100 ETH) / Railgun Depos (100 ETH) - 0xe30ff30cd7b15fb879a8081dca04bb8e65fdc187 - Tornado Cash Withdrawals (100 ETH) / Railgun Depos (100 ETH) - 0x8073fbf5ad6b61ed3cabbc7926f8b3b0547b2596 - Tornado Cash Withdrawals (100 ETH) / Railgun Depos (100 ETH) - 0xef565be6a6688b3e3afdaec4b38ccac31e45f889 - Tornado Cash Withdrawals (100 ETH) / Railgun Depos (100 ETH) - 0x7eab54b2ff6c51673f9615ef895caa79fff4ee53 - Tornado Cash Withdrawals (100 ETH) / Railgun Depos (100 ETH) - 0x3e605b942ba0280504e1de1ff1a926c21e5d2b57 - Tornado Cash Withdrawals (100 ETH) / Railgun Depos (100 ETH) - 0xb7939ddd1e4667cc713bf9e99ae758ab7fcc1398 - Tornado Cash Withdrawals (100 ETH) / Railgun Depos (100 ETH) - 0x2cbe3ef4b95138dd3fdc212fc65ad0986af5ce5a - Tornado Cash Withdrawals (100 ETH) / Railgun Depos (100 ETH) - 0x773ced588987c836c9a4c3510927302beb6484fe - Tornado Cash Withdrawals (200 ETH) / Railgun Depos (108 ETH) - 0x294f9b0155e97d68bc18400db05418a3c59d99a2 - Tornado Cash Withdrawals (200 ETH) / Railgun Depos (200 ETH) - 0x4dfa2df244e196b21026753ab5d571a0b9168f00 - Post-TC / Railgun Depos (30 ETH) - 0x5c6de8f14526a0111e853febf9f4fc74a3a3eb7d - Tornado Cash Withdrawals BSC - 0xde28afaadb6829cd150544bbdc32b4f6b88685ad - Tornado Cash Withdrawals BSC 2025-11-13 - 0x0ee23d24e7db7c4cd2befc43f431cdb6af20db2e - Tornado Cash Withdrawals BSC 2025-11-13 - 0xfd93166d4737938e2a2b2e9f237c03bc12a09e0b - Post-TC / Staking / Railgun Withdrawals (500 ETH) 2025-11-08 2025-12-10 - 0xa9f5cb4a5dbd6432292a632921d250d2df93ae73 - Post-TC / Staking / Railgun Withdrawals (500 ETH) - 0xf295f15d8e933fba1d56bb278ef8972104f24056 - Post-TC / Staking / Railgun Withdrawals (180 ETH) - bc1q3tx7l9rj4lmcak4amjr04j2nl2e398jvyf6h4v - Post-TC Bitcoin - bc1qfzu53kycgqe6a5v07y92ss4k9wutwgxtyhxa96 - Post-TC Bitcoin - bc1qgly6e9hnh78prsl60487qkry7tg7jn5jrws3w5 - Post-TC Bitcoin - bc1qmjh8eqw5cqdy5uwne2wzhxyllzugh3qf293eh7 - Post-TC Bitcoin - bc1qp70ckxm7n07zcw9en94m0rhqrkrxdq7pu7mk8r - Post-TC Bitcoin - bc1quldy3s6f52n6t92xp2q58x6zhr2wv9hsvqvmmc - Post-TC Bitcoin - bc1qvkh2fey5nn69gfyw88h02qjxk055hu468axjfy - Post-TC Bitcoin - bc1qetre83c0v84wxpzec0jwnrf2693rf7fxr9qkwh - Post-TC Bitcoin - bc1q6tj25s0xl2c88276uxpt6msquz0crt0jjqq96k - Post-TC Bitcoin - bc1qm98mfu8ze2lg6h2u5cx3raw54eqrjpwgpt6fjl - Post-TC Bitcoin - bc1qcdddaua4a57c6u8w645cmvxgd3f0prtphsdhrt - Post-TC Bitcoin - bc1q8ywtyz33k4jzsc3qm7yd68eufy48f5efm2wucn - Post-TC Bitcoin - bc1q7gntn39wmgylrh7mfsm2cuxpmrujupwgxyug3v - Post-TC Bitcoin - TR7fx4ZmcC9r2fXhSWDYWrVEL9tmNUqkTP ($1.5m) - TN3EyaNzFDYunqxbsDEZ2v5iEz84rbLPQz ($1.4m) ### 2026 - 0x47311db342664c996e62b3096e0919a493bb2727 Garden Finance Dust 2026-01-26 - 0x95f0564879d5e33000d53107adaea6809aaa3838 Garden Finance Exploiter - bc1qj8ce4jgaere8y6qkzpwfp0474wwtkan9efd7t0 Garden Finance Dust 2026-01-27 - 0xac34f093d016c2e1abec118235804a806f719200 2025-11-07 ??? - 0x32538397c65a122839420799195a7d6b3f090e6f 2025-11-07 Tornado Cash Withdraw - 0x10c08732d271fdebbe395defb7b39f488a4da877 2025-11-07 Tornado Cash Withdraw - 0x73ad7a98afc97bbe84981741cc70f8e098a557c7 2025-11-07 Tornado Cash Withdraw - 0x456ffc9e543dd6fa14e257de73d55baf3d9b88fc 2025-11-07 Tornado Cash Withdraw - 0x89c0472f49cf00888346e5c2d753999dd87d1793 2025-11-07 Tornado Cash Withdraw - 0x4d9ecd947e995959d7a9467a0bea8e719cbe519a 2025-11-07 2025-11-24 Tornado Cash Withdraw 10 ETH - 0x3673139a56a5128087aeeda64ed91971262f2ad1 2025-11-24 2025-11-25 Goes to Monad on BSC - 0x0b8f57211f6c20d85517fc42591b7e06c025d53a 2026-02-02 Receives from Monad on ETH - 0xa9f5cb4a5dbd6432292a632921d250d2df93ae73 2026-02-02 Garden Finance Funds, Staked Aave - 0xfd93166d4737938e2a2b2e9f237c03bc12a09e0b 2026-02-02 Garden Finance Funds, Staked Aave - 0xdef57ccb20b1f2eaee0c64aab3280350f84cb0fc - 2022-08-30 Zach Freeze + [MGNR](./mgnr.md) Funds and/or [Bondly](./bondly.md) Funds - bc1qn7psrmt3800l6ejwdmy3ydzwehh9j3pxpxjyjp - 2022-08-30 Zach Freeze + [MGNR](./mgnr.md) Funds and/or [Bondly](./bondly.md) Funds - bc1q27vxzyuh4vqwt3u9aqpuk7z5xtgz9y0tqxzesq - 2022-09-05 From [Zach's Thread](https://x.com/zachxbt/status/1792666848951239026) - https://x.com/zachxbt/status/1792666848951239026 - bc1qzumu2k8v2v4kte2esqaw798mf4v2vdruwax7rq - 2026-01-31 - bc1qwtpszrrfp9cvsqy9ewmcqle7k9qaj92920cljr - 2026-01-31 Post-TC - 0x3f45f6211db056d7eb0c0e69d55a2d5ff4f9b347 - 2026-01-31 Post-TC - 0xfd93166d4737938e2a2b2e9f237c03bc12a09e0b - 2026-01-31 Consolidates with [Garden Finance](./garden-finance.md) ## Tornado Cash - Deposits: 2443 ETH - Withdrawals: 2439.1 ETH ## Railgun - Deposits: 1238 ETH - Withdrawals: 1180 ETH + $170k USDT ## Connections ### 2025-11-13 - From: 0xab5b92a83382635182db5a00da81cd423a5cddb0 [Dust Collect 7ec](./sqsq-dust-collector-7ec.md) / [Dust Collect b5d](./sqsq-dust-collector-b5d.md) - To: 0x7d76ee241512d1b2db5a7e09fd04f5da71b31369 [Garden Finance Exploiter](./garden-finance.md) - Txn: 0xcaf4e6f231dfca1886665566fd6ad3206497ef6f3a8022a68f457214818a6063 ### 2025-11-10 2025-11-13 - 0x7c1cf2f256d2e83dee5ae15e7ac0f7f6197e780b - Receives from both [SNET](./request-singularity.md) and [Garden Finance](./garden-finance.md)