The Sandbox to Compensate SAND Holders 1:1 After $700K Bridge Exploit
Key Takeaways
- •The Sandbox will repay eligible bridged SAND holders on Base and BNB Smart Chain at a 1:1 ratio using Ethereum-based SAND from its treasury, without minting new tokens.
- •An Aug. 21 exploit drained approximately 14.7 million SAND, worth about $700,000, by exploiting a configuration flaw that let the attacker become the sole verifier of bridge messages.
- •The claims process is expected to open within two weeks and stay open for another two weeks, with two centralized exchanges holding over 72% of eligible balances distributing compensation directly.
- •More than 339 trillion unbacked SAND minted on the two networks has been isolated and cannot be bridged or redeemed, while SAND on Ethereum and Polygon was unaffected.
- •The compromised bridge contracts will be permanently retired, and any future Base or BNB Chain bridges will use newly deployed contracts.
Blockchain gaming platform The Sandbox has pledged to repay eligible SAND holders on a 1:1 basis after an Aug. 21 bridge exploit drained roughly 14.7 million SAND — worth approximately $700,000 — from an Ethereum vault.
In a post-mortem published Thursday, the company said users who legitimately held bridged SAND on Base or BNB Smart Chain prior to the attack will receive an equal amount of Ethereum-based SAND. The compensation will be paid out of The Sandbox's treasury, and no new tokens will be minted.
The claims process is expected to open within two weeks and remain open for a further two weeks. According to The Sandbox, two centralized exchanges hold more than 72% of eligible balances and will distribute compensation directly to their affected customers.
The project said the attacker exploited a configuration flaw in SAND's Base and BNB Chain contracts, which allowed them to become the sole verifier of incoming bridge messages and mint unbacked tokens. The Sandbox confirmed that approximately 14.7 million SAND tokens were drained, equivalent to about 0.5% of the token's 3 billion maximum supply.
Although more than 339 trillion unbacked SAND was minted on the two networks, those tokens have been isolated and cannot be bridged or redeemed. SAND on Ethereum and Polygon was unaffected by the incident.
Bridge exploits of this kind have repeatedly hit the crypto sector, as cross-chain bridges that lock tokens on one network and mint representations on another concentrate large pools of assets in single contracts whose verification logic can be attacked. The decision to compensate holders from treasury funds rather than by minting replacement tokens echoes the approach taken by several projects after past bridge incidents.
The compromised bridge contracts will be permanently retired, and The Sandbox said any future Base or BNB Chain bridges would rely on newly deployed contracts. Users holding bridged SAND on Base or BNB Chain can expect details of the claims window and exchange distribution arrangements as the process opens.
SAND traded at roughly $0.04 at the time of publication, down 10.4% over the previous seven days, according to CoinGecko.
