A serious incident occurred in The Sandbox ecosystem that could have been a catastrophe for the entire metaverse. I managed to establish that an unknown attacker exploited a vulnerability in the project's cross-chain infrastructure and minted a colossal 14.9 billion unbacked SAND tokens on the Base and BSC networks. For comparison: the total supply of the original asset on Ethereum is only 3 billion SAND, which is equivalent to approximately $140 million at the current exchange rate. This means the attacker created a volume five times larger than the legitimate issuance.
Team response and scale of the threat
The Sandbox developers reacted promptly: they blocked all cross-chain operations and isolated the compromised tokens on the original blockchains. This prevented the spread of fake assets to other networks and decentralized exchanges. It is important to emphasize that, according to my data, user wallets were not affected — the damage impacted only 0.01% of the total SAND in circulation. Nevertheless, the very fact of such issuance raises questions about the security of bridges and inter-network protocols, which remain a weak link in the industry.
Although the team quickly contained the problem, this case serves as a reminder of the systemic risks associated with cross-chain solutions. Vulnerabilities in such mechanisms can lead to irreparable consequences if multi-layered verification and automatic anomaly monitoring are not implemented. The market has already seen similar attacks, but each new incident highlights the need to tighten security standards.
My analysis: Timely blocking and isolation of assets is a competent step, but it should not reassure investors. The incident revealed a potential fragility in the infrastructure, and I recommend that the team conduct a full audit of all smart contracts and bridges to rule out a recurrence of similar scenarios. In the long term, trust in metaverses will be built on their ability to protect issuance and the integrity of tokenomics.