Key Takeaways:
A Sandbox bug enabled the creation of unbacked SAND tokens on Base and on BNB Sensible Chain.Blockaid, a blockchain safety agency, mentioned that it discovered round $49 billion in face worth faux SAND, which is over 400 transactions.Each affected networks will not be but bridged whereas SAND on Ethereum and Polygon nonetheless isn’t affected.
A major cross-chain safety incident, with unbacked SAND tokens minted on Base and BNB Sensible Chain, has now been taken into consideration within the Sandbox. The person complete worth of those faux tokens equated to a formidable $49 billion, however the venture claims they account for lower than 0.01% of the venture’s complete provide of SAND.
SAND Bridge Exploit Triggers Emergency Shutdown
The Sandbox mentioned the problem surveyed its cross-chain bridge infrastructure, linking SAND and BSC to Base. This meant an attacker may mint SAND tokens with out the supporting asset that’s usually wanted for the belongings that have been bridged.
The Sandbox staff has recognized and absolutely contained a latest vulnerability concerning the SAND cross-chain bridge on Base and BNB Sensible Chain (BSC). The affect is minimal, representing lower than 0.01% of the whole SAND token provide.
SAND tokens on Ethereum and Polygon are NOT…
— The Sandbox (@TheSandboxGame) August 22, 2026
The venture was applied by shutting all exercise of bridging and unbridging the 2 networks. Because of this, SAND at present held on Base and BSC is remoted and can’t be transferred again by way of the bridge or redeemed by way of the affected cross-chain routes. Merchants too obtained a transparent warning from The Sandbox.
Customers have been warned to not buy, promote or commerce SAND on both Base or BSC because of the liquidity on these networks.
The Sandbox mentioned that it didn’t face any affect in both Ethereum or Polygon deployments. The venture mentioned that no person pockets was compromised and that the SAND locked on the Ethereum facet that hosts legitimate bridged tokens is unbroken.
Learn Extra: BounceBit Shuts Down Layer 1 after An Authorization Exploit
$49 Billion Determine Displays the Scale of Faux Token Minting
The most important quantity was reported by blockchain safety agency Blockaid, which recognized roughly $49B in SAND being minted at face worth by way of over 400 transactions.
Estimates of the quantity of belongings misplaced or pulled from the protocol will not be essentially $49 billion. Relatively, it exhibits the market worth for the numerous unbacked tokens that have been created as a part of the exploit.
Faux Provide Can not Be Handled as Professional Liquidity
It’s value noting that the attack-made SAND just isn’t supported by the reserves of the legit cross-chain provide, which is why this distinction is important. An investigation is ongoing and an in depth incident report and technical put up mortem will observe, it mentioned.
Compensation Plan Targets Affected Liquidity Suppliers
Preparation for a compensation plan is on-going together with taking a snapshot of the Sandbox ecosystem previous to the incident.
The plan will goal BSC customers in chosen liquidity swimming pools on Base. The venture has but to launch the final word compensation bundle or the sum that is likely to be accessible. The Sandbox said there’s nothing for normal SAND holders on Ethereum and Polygon to do.
The incident once more brings safety issues involving cross-chain infrastructure to the fore. The Sandbox’s quick focus is to include the affected networks, analyze its extent, and plan on repaying eligible liquidity suppliers.
Learn Extra: WEMIX Halts Bridges After $724K Exploit
