Back Pluang

The Sandbox hacked for $718M via cross

Pluang • August 22, 2026

The Sandbox suspended SAND token bridging on Base and BNB Smart Chain after an attacker exploited the cross-chain system to mint unbacked tokens, isolating SAND on these networks. The Ethereum-based SAND remains secure and unaffected, with no user wa...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

The Sandbox Exploit: 14.9B Unbacked SAND Tokens Minted on Base and BNB Chain On August 22, 2026, The Sandbox reported a security breach that allowed an attacker to mint 14.9 billion unbacked SAND tokens on the Base and BNB Smart Chain networks. The exploit involved hijacking LayerZero delegate permissions via the `approveAndCall` function, resulting in an estimated face value of $49 billion in unauthorized tokens. The Sandbox quickly disabled bridging to and from these networks, isolating the compromised tokens and preventing further transfers. The company stated that the actual impact was less than 0.01% of the total SAND supply, and no user wallets were compromised. Major South Korean exchanges, Upbit and Bithumb, suspended SAND transactions as a precaution. The Sandbox is preparing a compensation plan for affected liquidity providers and plans to release a full post-mortem report. 24 sources 68

Extracted Entities

The Sandbox hacked for $718M via cross

The full story

Extracted Entities

Attack Types (1)

Companies (3)

Platforms (1)