The Sandbox to Reimburse SAND Holders After Bridge Exploit

The Sandbox announced a reimbursement plan for SAND holders affected by a bridge exploit on August 21. The attack exploited a configuration flaw in the Base and BNB Smart Chain bridge contracts, allowing the attacker to mint more than 339 trillion unbacked SAND and drain approximately 14.7 million tokens (about $700,000) from an Ethereum vault.

Reimbursement Details

Eligible users who held bridged SAND on Base or BNB Smart Chain before the exploit will receive an equivalent amount of Ethereum‑based SAND. The compensation will be funded from The Sandbox treasury, without minting new tokens, so the circulating and maximum supply of SAND will not increase.

Claims Process

• Claims are expected to open within two weeks of the post‑mortem release and remain open for an additional two weeks.
• Balances held on two major centralized exchanges (accounting for over 72 % of eligible holdings) will be reimbursed directly by those platforms, requiring no individual claim.
• Other holders will submit claims through a portal that will be launched once the required infrastructure is ready.

Bridge Retirement

The compromised bridge contracts for Base and BNB Smart Chain will be permanently retired. Future bridges to these networks will require newly deployed contracts, though no timeline was provided.

Impact on the Ecosystem

The exploit affected only bridged SAND on Base and BNB Smart Chain; SAND on Ethereum and Polygon remained untouched. The stolen amount represented roughly 0.5 % of SAND’s 3 billion‑token maximum supply. The fraudulent supply has been isolated and cannot be bridged back to Ethereum or redeemed against legitimate reserves.

Context of Bridge Attacks

Bridge exploits have been frequent in 2026, with notable incidents affecting Humanity Protocol, Wanchain, Axelar, and AFX. These attacks often involve verification flaws, compromised keys, or social‑engineering breaches.