The metaverse team The Sandbox has taken full responsibility for the incident and announced the launch of a recovery program for all legitimate SAND token holders affected by the attack on bridge contracts. This refers to users who held assets on the Base or BNB Chain networks before the exploit on August 21. The attacker managed to withdraw approximately 14.7 million SAND, equivalent to about $700,000 — roughly 0.5% of the total maximum supply of 3 billion tokens.
Compensation mechanics and coverage scope
Payments will be made in the native Ethereum version of SAND from the project's treasury, eliminating the need for additional issuance and avoiding dilution of the existing supply. This is an important signal for the market: the team is not resorting to inflationary mechanisms but is using reserves, which indicates the project's financial stability. The compensation program will cover more than 72% of all affected balances, which is a high rate for such incidents.
Claims for reimbursement will begin to be accepted within the next two weeks. In parallel, the compromised bridge contracts for Base and BNB Chain will be permanently decommissioned — a sensible step that minimizes the risks of repeated attacks. It is important to note that SAND holders on the Ethereum and Polygon networks were not affected, confirming the targeted nature of the exploit.
My analysis: This incident highlights the systemic vulnerability of cross-chain bridges, which remain one of the weakest points in DeFi infrastructure. The Sandbox's decision to compensate the damage in full is not only a restoration of user trust but also a strategic move that strengthens the project's reputation amid increasingly frequent hacks. However, investors should remember: even with compensation, such events create volatility and require a reassessment of risk management approaches in multi-chain ecosystems.