Sandbox Halts Base and BNB Smart Chain Bridges After Exploit

Sandbox, the metaverse and blockchain gaming network, abruptly stopped bridging to Base and BNB Smart Chain after uncovering a critical exploit.

Anatomy of the Exploit

■Blockaid identified that the attacker hijacked LayerZero delegate permissions via an approveAndCall function to mint unbacked SAND tokens.

■PeckShield reported that two addresses minted 14.9 billion SAND during the breach.

■The exploit generated a face‑value of $49 billion in unbacked tokens, a figure that far exceeds any actual funds stolen.

Financial Impact and Market Reaction

■SAND has a market cap of roughly $136 million, and the breach affected less than 0.01% of its 3 billion token supply—equivalent to fewer than 300,000 SAND.

■In the 24‑hour window following the disclosure, SAND slipped only 0.8%, but intraday volatility spiked to an almost 10% plunge.

■The incident heightened risk perception, creating short‑term liquidity pressure on the token.

Liquidity Safeguards and User Protection

■Sandbox disabled bridging on both Base and BNB Smart Chain, freezing token movement and warning users against trading on those networks.

■SAND on Ethereum and Polygon remained untouched; locked tokens on Ethereum continue to back the bridge.

■South Korean exchanges Bithumb and Upbit suspended SAND deposits and withdrawals citing security concerns.

■The company announced it will take a pre‑incident snapshot and prepare compensation for users of the affected liquidity pools.

Regulatory and Compliance Outlook

■Exploits of this nature reinforce the push from regulators such as the SEC and the EU’s MiCA for stricter oversight of cross‑chain bridge protocols.

■Institutional investors will increasingly demand rigorous smart‑contract audits and third‑party bridge vetting as part of their due‑diligence.

■Emerging on‑chain collateral solutions like Anvil could become a regulatory focal point by offering programmable credit lines that mitigate unbacked token risks.

Deniz Arel – Director of Crypto Regulation & Compliance: This breach starkly illustrates how insufficient technical oversight of bridge protocols can threaten market stability. Regulators should mandate formal smart‑contract audits and enforce capital adequacy for bridge operators. Institutional players must evaluate not just token liquidity but also the underlying security architecture before allocating capital.