Back Pluang

The Sandbox contained a cross-chain exploit minting unbacked SAND

Pluang • August 22, 2026

A security breach on August 22, 2026, allowed hackers to create 14.9 billion unbacked SAND tokens on The Sandbox's Base network via a smart contract flaw. The real financial loss was around $675,000 after extracting 14.75 million SAND tokens fr...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

The Sandbox Exploit: 14.9B Unbacked SAND Tokens Minted on Base and BNB Chain On August 22, 2026, The Sandbox reported a security breach that allowed an attacker to mint 14.9 billion unbacked SAND tokens on the Base and BNB Smart Chain networks. The exploit involved hijacking LayerZero delegate permissions via the `approveAndCall` function, resulting in an estimated face value of $49 billion in unauthorized tokens. The Sandbox quickly disabled bridging to and from these networks, isolating the compromised tokens and preventing further transfers. The company stated that the actual impact was less than 0.01% of the total SAND supply, and no user wallets were compromised. Major South Korean exchanges, Upbit and Bithumb, suspended SAND transactions as a precaution. The Sandbox is preparing a compensation plan for affected liquidity providers and plans to release a full post-mortem report. 22 sources 68

The Sandbox contained a cross-chain exploit minting unbacked SAND

The full story

Extracted Entities

Attack Types (1)

Companies (2)