Sandbox Discloses Bridge Exploit; 500M SAND Minted Across Base and BNB Chain

The Exploit and Response

The Sandbox revealed a vulnerability in its cross-chain bridge that permitted an attacker to mint unbacked SAND on Base and BNB Smart Chain without corresponding collateral. The project said it has contained the breach and identified the affected transactions. The Sandbox did not publicly disclose the exploit timeline or specify which entity or process first detected the vulnerability.

Scale and Supply Impact

Reports differ on the minting volume: Crypto Briefing cited 500 million SAND tokens, while The Sandbox's own statement estimated the direct impact at less than 0.01% of the token's 3 billion total supply — a figure that would represent approximately 300,000 SAND at face value, substantially lower than the 500 million figure. The discrepancy suggests either incomplete accounting of all minted tokens across both chains or differing methodologies for measuring "impact." SAND closed Wednesday at roughly $0.47 per token on major exchanges, though the token saw elevated volatility in the 24 hours following the disclosure.

Technical and Market Implications

Bridge exploits have emerged as a recurring vector for loss of funds in cross-chain protocols; the Wormhole and Ronin bridges suffered comparable attacks in prior years. The Sandbox's containment of this particular exploit before significant token liquidation suggests faster incident response than some comparable breaches, but the incident raises questions about pre-deployment auditing of bridge code and the reliance on real-time monitoring to catch minting anomalies.