The team behind the metaverse The Sandbox has faced a serious security challenge: an unknown attacker managed to generate a colossal 14.9 billion unbacked SAND tokens on the Base and BSC networks. This number is especially striking given that the total supply of the original asset on Ethereum is only 3 billion SAND, equivalent to approximately $140 million at current market prices.
As an analyst, it is obvious to me that the scale of the issuance is five times greater than the legitimate token supply, which could have caused catastrophic depreciation of the asset and panic among holders. However, the project team acted promptly: developers immediately blocked cross-chain operations and isolated the attacker's tokens on the original blockchains, preventing their movement to other networks.
It is important to emphasize that user wallets, according to the team's assurances, were not affected. Only 0.01% of the total SAND in circulation was impacted, minimizing potential damage to the ecosystem. Nevertheless, the very fact of a vulnerability in cross-chain bridges raises questions about the reliability of the infrastructure, especially in the context of the growing popularity of multichain solutions.
This incident serves as a reminder that even established projects with multi-million dollar valuations are not immune to attacks at the protocol level. Investors should closely monitor The Sandbox's further reports on the causes of the vulnerability and measures to address it, as transparency here will be a key factor of trust.
Expert commentary: The successful containment of the attack is a positive signal, but it does not eliminate systemic risks. Such incidents highlight the need for stricter smart contract audits and stress tests of cross-chain bridges before entrusting them with significant amounts of liquidity.