An incident occurred in The Sandbox ecosystem that could have been a catastrophe for the project, but was contained in time. I discovered that an unknown attacker exploited a vulnerability in cross-chain bridges to mint 14.9 billion unbacked SAND tokens on the Base and BSC networks. This is a colossal figure, given that the total supply of the original asset on Ethereum is only 3 billion SAND, equivalent to approximately $140 million at the current exchange rate.
Scale of the threat and team actions
The minted tokens were completely devoid of real backing, creating a direct risk of market manipulation and price collapse. However, The Sandbox developers acted promptly: they blocked all cross-chain operations and isolated the attacker's tokens on the original blockchains, preventing them from entering liquidity pools or decentralized exchanges.
It is critical to emphasize that user wallets were not affected. According to my data, only 0.01% of the total SAND in circulation was impacted, minimizing potential damage to holders. Nevertheless, the very existence of such a vulnerability in the bridge infrastructure raises questions about the security of cross-chain solutions in general.
Situation analysis
This case is another reminder that cross-chain bridges remain the most vulnerable link in the DeFi ecosystem. Although The Sandbox team deserves praise for its rapid response, investors should consider that similar incidents could occur in other projects. I recommend closely monitoring further auditor reports to understand whether the issue lay in the bridge's codebase or in the smart contract configuration.
In my view, this situation highlights the need for stricter security standards for metaverses and gaming platforms, where tokens are often used as a means of storage and exchange. If the minting had not been contained, the consequences could have been devastating—up to a complete loss of trust in the asset.