A vulnerability tucked inside The Sandbox’s cross-chain bridge briefly let an attacker conjure billions of unbacked SAND tokens out of thin air, setting off a scramble across South Korean exchanges before the metaverse studio said it had shut the breach down. The Sandbox bridge exploit, which hit deployments on Base and BNB Smart Chain in the early hours of August 22, 2026, has left security researchers and the project itself disagreeing sharply over how much damage was actually done.
Key takeaways
The Sandbox says it fully contained a vulnerability in its SAND cross-chain bridge that let an attacker mint unbacked tokens on Base and BNB Smart Chain.
Bridging between both affected networks has been disabled; The Sandbox says no user wallets were hit and that SAND on Ethereum and Polygon remains secure.
Security firm Blockaid estimated roughly $49 billion in minted fake SAND across more than 400 transactions, while PeckShield counted 14.9 billion SAND minted across two ad
We współpracy z: https://en.cryptonomist.ch/2026/08/23/sandbox-bridge-exploit-security/
