The team behind The Sandbox metaverse has successfully neutralized a critical vulnerability that nearly led to the collapse of the project's tokenomics. An unknown attacker managed to generate 14.9 billion unbacked SAND tokens on the Base and BSC networks — five times the entire legitimate supply of the asset on Ethereum, which stands at 3 billion SAND (approximately $140 million at the current exchange rate).
Scope of the threat and prompt measures
The incident was detected during routine monitoring of cross-chain bridges. Developers responded instantly: all cross-chain operations were blocked, and the generated tokens were isolated on the original blockchains, preventing them from entering liquidity pools and centralized exchanges. The key point — user wallets were not affected. According to the team's estimates, only 0.01% of the total SAND in circulation was impacted, minimizing the effect on asset holders.
It is important to emphasize that the attack did not affect the main Ethereum network, where all of SAND's real liquidity is concentrated. This indicates that the attacker targeted the less protected sidechains specifically, hoping for insufficient cross-chain validation checks. Such incidents are a warning sign for the entire industry: bridges and sidechains remain the most vulnerable entry point for hackers, even when core protocols are impeccably secured.
For The Sandbox, this case served as a stress test of their security infrastructure. The swift response and complete isolation of the threat are an example of how a mature team should operate in a crisis. However, investors should remember: such vulnerabilities are uncovered regularly, and even temporary blocking of cross-chain operations can cause short-term volatility.
My analysis: Although the incident is technically contained, it highlights a systemic problem with scaling through sidechains without full independent verification. The market may react with reduced confidence in cross-chain solutions overall, but for SAND this is likely a one-off correction — the project's fundamental metrics have not changed.