The team behind the metaverse The Sandbox has committed to fully compensating SAND token holders affected by a recent attack on the cross-chain bridge. The incident occurred on August 21, when an attacker managed to withdraw approximately 14.7 million SAND, valued at $700,000 at the time. This amount represents about 0.5% of the total maximum supply of 3 billion tokens — a significant but not critical blow to the project's liquidity.
Compensation mechanism and coverage scope
A key decision — payouts will be made in the Ethereum version of SAND from the project's treasury, eliminating the need for additional issuance and dilution of the asset's value for all holders. This is a sound approach that demonstrates the team's financial stability and respect for community interests. The compensation program will cover more than 72% of affected balances, with the application window opening within the next two weeks.
It is important to note that only users who legitimately held tokens on the Base or BNB Chain networks at the time of the attack were affected. SAND holders on Ethereum and Polygon are unaffected by the incident, indicating the targeted nature of the exploit, which aimed at vulnerabilities in specific bridge contracts.
Radical security measures
As part of its post-incident response, The Sandbox has decided to permanently decommission the compromised bridge contracts for Base and BNB Chain. This is a bold move that may temporarily limit cross-chain liquidity, but in the long term reduces the attack surface and restores user confidence in the project's infrastructure.
Observing the market reaction, I would note: the team's prompt and transparent communication, as well as the absence of attempts to shift blame onto third parties, is a positive signal. In an industry where reputational risks after hacks often exceed direct financial losses, this approach could become a benchmark for crisis management. However, investors should closely monitor the details of the claim verification process — this is where bureaucratic delays typically arise, capable of undermining trust even in the most well-intentioned efforts.