The Sandbox metaverse has faced a serious challenge: an unknown attacker managed to generate a colossal 14.9 billion unbacked SAND tokens on the Base and BSC networks. For comparison, the total supply of the original asset on the Ethereum network is only 3 billion SAND, equivalent to approximately $140 million at current market prices. This means the volume of fabricated coins is five times greater than the legitimate issuance.
Immediate response and threat isolation
The project team acted promptly: cross-chain operations were blocked, and the attacker's suspicious tokens were isolated on the original blockchains. Critically, user wallets were not affected—the incident impacted only 0.01% of the total SAND in circulation. This indicates that the attack was aimed at the protocol, not at end holders of assets.
Nevertheless, the situation highlights systemic risks associated with cross-network interoperability. Even with strict verification mechanisms in place, bridges and cross-chain solutions remain a vulnerable link in the DeFi ecosystem. The fact that the attacker was able to mint tokens bypassing standard checks points to the need for deeper smart contract audits across all supported networks.
From my perspective, this incident is a wake-up call for the entire industry. The scale of issuance of 14.9 billion coins could have caused a catastrophic drop in the price of SAND had it not been for the developers' rapid response. However, investors should remain vigilant: similar vulnerabilities could recur in other projects, especially those actively expanding their multichain presence. In the long term, transparency in incident reports and enhanced security at the protocol level will become key factors of trust in metaverses.