- Published on
1 repayment after $700K bridge exploit
- Authors
- Name
- DeepHorus
The Sandbox, a leading blockchain gaming platform, has committed to fully reimbursing users affected by a recent bridge exploit that drained approximately $700,000 worth of its native SAND token. The incident occurred on August 21, when an attacker exploited a configuration flaw to steal 14.744 million SAND tokens from an Ethereum vault. In response, the project announced a 1:1 repayment plan for all eligible holders on the Base and BNB Smart Chain networks, utilizing funds directly from The Sandbox treasury.
The exploit targeted the bridging mechanism between the Ethereum mainnet and the Layer 2 networks of Base and BNB Chain. According to a post-mortem report released by The Sandbox, the vulnerability allowed the attacker to become the sole verifier for incoming bridge messages. This privilege enabled the minting of unbacked SAND tokens on the target chains, which were then illicitly drained. The compromised bridge contracts have now been permanently retired to prevent further attacks.
The scale of the exploit was significant in token numbers but relatively contained in value. While over 339 trillion unbacked SAND tokens were minted on Base and BNB Chain, the actual drain was 14.744 million tokens. This stolen amount represents roughly 0.5% of SAND's total maximum supply of 3 billion tokens. Importantly, SAND tokens on the Ethereum and Polygon networks remained unaffected and secure throughout the incident.
The Sandbox has outlined a clear compensation plan for its community. Eligible users are those who held legitimately bridged SAND on Base or BNB Chain prior to the August 21 attack. The project stated that no new tokens will be minted for this repayment; all funds will come from the existing treasury. The claims process is scheduled to open within two weeks and will remain available for an additional two-week period.
To streamline the process, The Sandbox noted that two major centralized exchanges hold more than 72% of the eligible balances. These exchanges will directly distribute the compensation to their affected customers. For users outside of these exchanges, a separate claims process will be administered. The commitment to 1:1 repayment demonstrates a proactive approach to user protection in the decentralized finance space.
The incident has contributed to short-term market pressure for the SAND token. As of the latest data, SAND was trading at approximately $0.04, reflecting a 10.4% decline over the previous seven days, according to CoinGecko. The broader implication for The Sandbox will be restoring user confidence after this security breach. The project has signaled that any future bridging solutions for Base and BNB Chain will utilize newly deployed, secure contracts.
