A serious incident involving unauthorized token issuance has occurred in The Sandbox ecosystem. I managed to obtain details of this event: an attacker exploited a vulnerability in cross-chain bridges and minted 14.9 billion unbacked SAND tokens on the Base and BSC networks. For comparison, the total supply of the original asset on Ethereum is only 3 billion SAND, which is equivalent to approximately $140 million at the current exchange rate.
Scope of the Threat and Team Response
This case is a classic example of an attack on cross-chain infrastructure, where insufficient data verification during asset transfers allows tokens to be created "out of thin air." The project team responded promptly: cross-chain operations were blocked, and the compromised tokens were isolated on their original blockchains. It is important to emphasize that user wallets were not affected—only 0.01% of the total SAND in circulation was impacted, which minimizes potential damage to holders.
Nevertheless, the very fact of such a vulnerability raises questions about the security architecture of bridges. The incident serves as a reminder of the systemic risks that remain in DeFi and metaverses, where liquidity is often moved between networks without proper auditing. In my view, this is a signal for all projects using cross-chain solutions: multi-layered checks and regular stress tests must be implemented to prevent similar scenarios from recurring.
While The Sandbox team has not yet disclosed the technical details of the attack's implementation, it can be assumed that the vulnerability was related to incorrect validation of smart contracts when processing cross-chain transactions. Investors should remain vigilant and monitor further updates, as such events may influence short-term volatility in SAND.