The Sandbox pledges 1:1 repayment after $700K bridge exploit
Reported by Cointelegraph · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
The Sandbox, a blockchain gaming platform, pledged to repay eligible SAND token holders 1:1 after a bridge exploit on August 21 drained about 14.7 million SAND worth $700,000 from its Ethereum vault. The exploit stemmed from a configuration flaw in the Base and BNB Chain bridge contracts. The Sandbox plans to compensate users from its treasury without minting new tokens and will retire the compromised bridge contracts permanently.
Why it matters
The Sandbox’s repayment commitment aims to restore trust among affected users and maintain the platform's integrity. The exploit highlights vulnerabilities in cross-chain bridge configurations that can risk significant token losses. The company’s swift response and compensation plan may influence how similar incidents are handled in the blockchain gaming sector.
Key context
The attacker exploited a flaw allowing them to become the sole verifier of incoming bridge messages and mint unbacked tokens on Base and BNB Smart Chain. Although 339 trillion unbacked SAND were minted on these networks, those tokens have been isolated and cannot be bridged or redeemed. SAND tokens on Ethereum and Polygon networks were not compromised.
Key numbers and entities
The attacker drained approximately 14.7 million SAND tokens, representing about 0.5% of the token’s 3 billion maximum supply and valued at $700,000. Two centralized exchanges hold over 72% of the eligible balances and will distribute compensation to their customers. SAND traded at about $0.04 at the time of the report, down 10.4% over the previous week.
What remains unclear
Details on the identity of the attacker have not been disclosed. The exact timeline for the claims process initiation is stated only as "within two weeks," without a specific date. It is also unclear which centralized exchanges will manage the majority of distributions.