Sandbox Bridge Exploit: 329 Trillion SAND Minted, $675K Drained

The Exploit and Attack Vector

The Sandbox disclosed a LayerZero bridge configuration flaw that permitted attackers to hijack delegate permissions and mint unbacked SAND tokens on Base and BNB Smart Chain. Within 5 hours of the exploit, 329 trillion phantom SAND tokens were created across the two chains. The attackers also drained approximately $675,000 from the Ethereum vault before the team identified the breach and shut down the bridge.

Actual Financial Impact vs. Initial Reports

The new reporting resolves the earlier discrepancy between conflicting impact figures. While Crypto Briefing initially cited 500 million minted tokens and The Sandbox's statement claimed less than 0.01% of supply, the actual scale was far larger in token count but smaller in realized theft. The face value of 329 trillion SAND at Wednesday's price of $0.47 would exceed $150 trillion on paper, but the actual stolen assets were limited to $675,000 in Ethereum vault drainage before containment. The containment speed prevented wider liquidation of the unbacked tokens.

Bridge Security and Response Timeline

Bridge exploits have emerged as a recurring attack surface in cross-chain protocols; the Wormhole and Ronin bridges suffered comparable attacks in prior years. The Sandbox's rapid containment—shutting down the bridge within 5 hours of the attack—prevented the attacker from withdrawing larger sums or flooding secondary markets with minted tokens. The project has not yet disclosed a detailed post-incident accounting or remediation plan, leaving questions about token recovery, vault replenishment, and whether affected users will receive compensation.