The Sandbox Commits to Full Compensation Following $700K Bridge Security Breach
Users holding tokens on BNB Chain and Base networks will be compensated with Ethereum-native SAND tokens sourced from the project's treasury, with the claims window set to launch in approximately two weeks.
The Sandbox, a prominent blockchain gaming platform, has committed to providing 1:1 reimbursement to qualifying SAND token holders following a bridge security breach on Aug. 21 that resulted in the loss of 14.744 million SAND tokens, valued at approximately $700,000, from an Ethereum-based vault.
In a post-mortem analysis released on Thursday, the company announced that users who legitimately possessed bridged SAND tokens on BNB Smart Chain or Base prior to the security incident will be compensated with an equivalent quantity of Ethereum-based SAND tokens. The reimbursement funds will be sourced from The Sandbox treasury reserves, with the company confirming that no additional tokens will be created.
According to The Sandbox, the claims process is anticipated to begin within a two-week timeframe and will remain accessible for an additional two-week period. The project revealed that two centralized cryptocurrency exchanges collectively hold over 72% of the qualifying balances and will handle the distribution of compensation directly to their impacted users.
According to the project's findings, the malicious actor took advantage of a configuration vulnerability present in SAND's BNB Chain and Base smart contracts, which enabled them to designate themselves as the exclusive verifier of bridge messages arriving from other networks and generate tokens without proper backing. The Sandbox verified that approximately 14.7 million SAND tokens were extracted from the system, representing roughly 0.5% of the token's total maximum supply of 3 billion.
While the attacker succeeded in minting more than 339 trillion unbacked SAND tokens across both affected networks, these fraudulent tokens have been quarantined and are unable to be bridged to other chains or exchanged for legitimate assets. The project emphasized that SAND tokens residing on Ethereum and Polygon networks remained secure and were not impacted by the exploit.
The vulnerable bridge smart contracts will be decommissioned permanently. According to The Sandbox, any potential future bridge implementations for BNB Chain or Base would utilize entirely new smart contracts deployed with enhanced security measures.
At the time of publication, SAND was trading at approximately $0.04, reflecting a 10.4% decline over the preceding seven-day period, based on data from CoinGecko.