On August 22, 2026, The Sandbox, a popular blockchain-based gaming platform, fell victim to a significant security breach. An attacker exploited the platform’s Base network contract, minting around 14.9 billion unbacked SAND tokens. This incident raised alarms across the crypto community, as it threatened the integrity of the SAND token and its liquidity.
While the headline figure of 49 billion dollars was widely circulated, it is crucial to clarify that this number represents the theoretical market value of the minted tokens and not actual stolen funds. The real losses were estimated at approximately 14.75 million SAND, drained from the Ethereum OFT Adapter, with the attacker netting around $675,000 (80 ETH) from the exploit.
The exploit was executed through an “approveAndCall” function, which allowed the attacker to hijack LayerZero delegate permissions. This manipulation enabled the minting of tokens on Base without any backing from the real, locked SAND held on Ethereum. Following the detection of the exploit, blockchain security firm Blockaid raised the alarm, confirming the minting of tokens across two addresses that exceeded the token’s entire supply on the Ethereum mainnet.
In response to the breach, The Sandbox team swiftly took action to contain the damage. They disabled bridging to and from Base and BNB Smart Chain, effectively freezing tokens on those networks. The project’s multisig also zeroed the LayerZero peers for Ethereum and BNB Smart Chain, isolating Base from the broader ecosystem.
To protect users, The Sandbox advised against buying, selling, or trading SAND on Base or BNB due to the compromised liquidity. Fortunately, SAND on Ethereum and Polygon remained unaffected, with the locked tokens on Ethereum maintaining their integrity.
South Korean exchanges, including Upbit and Bithumb, reacted promptly to the news. Upbit issued a trading caution, while Bithumb suspended SAND deposits and withdrawals following on-chain alerts regarding the breach.
The Sandbox, a subsidiary of Animoca Brands that raised $93 million in 2021, has announced plans to take a snapshot prior to the incident to prepare for compensation for users of affected liquidity pools. The team is also conducting a technical post-mortem to analyze the root cause of the exploit and improve security measures moving forward.
Despite the chaos, the SAND token’s price only dropped nearly 10% intraday, stabilizing to a mere 0.8% decline over the following 24 hours. This resilience indicates a level of trust among traders, though caution is still advised.
This exploit underscores the inherent risks associated with cross-chain token deployments. Minting tokens on a secondary chain without proper backing poses a significant threat to liquidity and can pressure market prices. As the situation continues to unfold, traders are encouraged to keep a close eye on updates from Upbit and Bithumb regarding trading resumption, as well as The Sandbox’s official recovery or burn plan.
