The Sandbox Pledges 1:1 SAND Repayment After Bridge Exploit
The Sandbox announced on Aug. 27 a 1:1 repayment in Ethereum-based SAND for users affected by an Aug. 22 bridge exploit that drained 14,742,341.84 SAND tokens from its Ethereum vault across Base and BNB Chain. The project will fund replacements from its treasury without minting new SAND, preserving the token's 3 billion maximum supply.
The Sandbox announced on Aug. 27 a commitment to repay users affected by an Aug. 22 bridge exploit at a 1:1 ratio in Ethereum-based SAND. Per The Defiant, the exploit drained 14,742,341.84 SAND tokens from the project's Ethereum vault across Base and BNB Chain, representing approximately 0.5% of SAND's fixed 3 billion maximum supply.
The repayment covers legitimately bridged SAND balances recorded in a pre-incident snapshot, excluding tokens created through unauthorized minting. The Sandbox said it will fund replacements entirely from its treasury and will not mint new SAND, leaving the token's maximum supply unchanged.
According to The Defiant, two centralized exchanges hold more than 72% of eligible balances and are expected to distribute replacement tokens directly to affected customers. Other qualifying holders will access a claims portal that The Sandbox expects to open within two weeks of the post-mortem announcement and remain open for a further two weeks.
The bridge flaw lay in the SAND token contract itself on Base and BNB Chain. Per The Defiant, the contract integrated with LayerZero bridge infrastructure, and a configuration function allowed an attacker to register as the sole verifier of incoming bridge messages. This enabled fraudulent messages to mint unbacked SAND on both networks. SAND on Ethereum and Polygon was unaffected. The additional unbacked tokens minted on Base and BNB Chain are isolated and cannot be bridged to Ethereum or redeemed against the vault.
Bridging on Base and BNB Chain remains disabled. The Sandbox reported the attacker's wallet to TRM Labs and Chainalysis for stolen-funds tagging and worked with centralized exchanges to disable deposits and withdrawals on the affected networks. The compromised Base and BNB Chain bridge contracts will be permanently retired; any future bridge to either network would require newly deployed contracts.
The Sandbox's initial damage estimate was drastically lower: the project reported less than 0.01% loss in the first hours after containment, a 50x underestimate from the actual 0.5% figure. Per The Defiant, the project attributed the initial gap to limited visibility during the early response window.
The Sandbox pledged to repay all affected holders at a 1:1 ratio using treasury funds, with two exchanges holding 72% of eligible balances expected to distribute directly and smaller holders accessing a claims portal opening within two weeks.
Watch for the claims portal opening and distribution timelines: whether the two exchanges deliver direct repayment swiftly and whether smaller holders can submit claims within the four-week window without friction. The permanent retirement of the Base and BNB Chain bridge contracts removes a single point of failure, but the incident exposes the risk of embedding bridge logic inside token contracts rather than isolating it to dedicated bridge infrastructure.
Ranked, source-checked, and verified by the desk's independent review pass.
Sources
Also reported by Cointelegraph. The desk cites only the pages it drew facts from; these outlets independently carried the same development.