A serious incident related to cross-chain bridge security has occurred in The Sandbox metaverse ecosystem. I have managed to determine that an attacker exploited a vulnerability in the inter-network interaction mechanism, which allowed them to generate a colossal volume of unbacked SAND tokens — 14.9 billion units — on the Base and BSC networks. For comparison, the total supply of the original asset on Ethereum is only 3 billion SAND, which is equivalent to approximately $140 million at the current exchange rate.
Threat Containment and Response Measures
The project team acted promptly: developers immediately blocked all cross-chain operations to prevent further spread of the fake coins. A key step was isolating the attacker's tokens on the source blockchains, which effectively froze their assets and prevented them from leaking into other networks or major liquidity pools.
It is important to emphasize that, according to my data verification, user wallets were not affected. The incident impacted only 0.01% of the total SAND in circulation, indicating the targeted nature of the attack. Nevertheless, the very fact of such large-scale issuance raises questions about the security architecture of bridges, which remain one of the most vulnerable points in DeFi infrastructure.
My assessment of the situation: incidents like this are a wake-up call for the entire industry. Even with rapid containment, the very possibility of unauthorized issuance at a volume five times greater than the actual supply demonstrates how fragile cross-chain solutions can be. Investors should closely monitor further audits of The Sandbox, as trust in the project now directly depends on the transparency of the investigation and the strengthening of bridge protection.