The Sandbox has confirmed that a vulnerability in its cross-chain infrastructure allowed an attacker to mint unbacked SAND tokens on Base and BNB Smart Chain, prompting the immediate shutdown of the affected bridges while the team investigates.
Exploit Targeted Base and BNB Smart Chain Bridges
The metaverse gaming platform said the incident stemmed from an issue affecting its bridges connected to Base and BNB Smart Chain (BSC). The flaw enabled the creation of SAND without corresponding backing, undermining the integrity of token movements across these networks.
Cross-chain bridges typically lock tokens on a source chain and issue representations on a destination chain. A failure in this process can result in uncollateralized assets being minted, which poses risks to token supply and market stability.
Immediate Containment and Ongoing Investigation
The Sandbox disabled the impacted bridges upon detecting the exploit to contain further activity. The project has not disclosed additional technical details while the investigation is underway. Users are advised to await official updates before interacting with affected bridge routes.
Why It Matters
- Unbacked token minting can distort circulating supply on destination chains and create market dislocations.
- Cross-chain bridges remain a frequent target for attackers due to their complexity and central role in moving liquidity across ecosystems.
- Incidents of this nature can affect user confidence and may lead to heightened scrutiny of bridge security practices.
Background
The Sandbox is a metaverse platform where users create, own, and monetize virtual experiences. SAND is the platform’s utility token, used for transactions, governance, and staking. Base is an Ethereum layer-2 network incubated by Coinbase, designed to offer lower-cost transactions, while BNB Smart Chain is an EVM-compatible network used widely for decentralized applications.