The team behind the metaverse The Sandbox has faced a serious challenge: an unknown attacker managed to generate 14.9 billion unbacked SAND tokens on the Base and BSC networks. This is nearly five times the total supply of the original asset on Ethereum, which stands at 3 billion SAND, or roughly $140 million at the current exchange rate. The incident exposed a vulnerability in the project's cross-chain mechanisms, raising questions about the reliability of inter-network bridges in the ecosystem.
Scope of the threat and developer response
Developers responded promptly: cross-chain operations were blocked, and suspicious tokens were isolated on their original blockchains. This prevented further spread of the fake assets and protected user wallets. According to the team, only 0.01% of the total SAND in circulation was affected by the attack, minimizing potential damage to holders.
Technical details and consequences
It is important to emphasize that the issuance occurred outside the main Ethereum network, indicating a weakness in the logic of cross-chain contracts rather than a compromise of the underlying token. The attacker exploited a discrepancy in validation between networks, which is a classic problem for multi-chain infrastructures. Despite the containment, the incident serves as a reminder of systemic risks: even temporary unbacked issuance can undermine trust in stablecoins and gaming assets in metaverses.
My analysis: This case is a warning signal for the entire industry. Although The Sandbox team acted competently by blocking operations and isolating assets, it demonstrates that cross-chain bridges remain the most vulnerable point in DeFi. Investors should pay closer attention to projects that are actively expanding to new networks and demand transparent security audits from them. In the long term, such incidents could accelerate the transition to more standardized inter-network interaction protocols, but for now, the market remains in a high-risk zone.