SAND bridge exploit contained after unbacked token mint

cryptonews

Yesterday

The Sandbox has contained a cross-chain bridge vulnerability that allowed an attacker to mint unbacked SAND on Base and BNB Smart Chain, with the project estimating the direct impact at less than ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

{"basename":"","ssrTDKData":{"titleTemplate":"%s - Tiger Brokers","title":"Tiger Brokers | Global Stocks, Options & Futures Trading App","description":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","keywords":"tiger brokers,tiger trade,tiger brokers singapore,broker online,stock trading in singapore,share trading singapore,brokerage firm singapore,trading app,stock broker singapore,stock trading platforms,trading account","social":{"ogDescription":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","ogImage":"https://c1.itigergrowtha.com/portal5/static/media/og-logo.0a0bd8dc.png","ogUrl":"https://www.etasphere.com/news/2661219349"},"companyName":"Tiger Brokers"},"pageData":{"isMobile":false,"isTiger":false,"isTTM":true,"region":"SGP","license":"TBSG","edition":"fundamental"},"isCrawlerRequest":true,"__swrFallback__":{"@#url:\"https://stock-news.skytigris.cn/v3/news\",params:#id:\"2661219349\",edition:\"fundamental\",auth_exemption:1,,,undefined,":{"share":"https://ttm.financial/m/news/2661219349?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-08-22 19:07","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2661219349","market":"other","top_or_hot":-1,"title":"SAND bridge exploit contained after unbacked token mint","media":"cryptonews","content":"<div>\n<p>The Sandbox has contained a cross-chain bridge vulnerability that allowed an attacker to mint unbacked SAND on Base and BNB Smart Chain, with the project estimating the direct impact at less than ...</p>\n\n<a href=\"https://crypto.news/sand-bridge-exploit-contained-unbacked-token-mint/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>SAND bridge exploit contained after unbacked token mint</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSAND bridge exploit contained after unbacked token mint\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-08-22 19:07 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/sand-bridge-exploit-contained-unbacked-token-mint/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The Sandbox has contained a cross-chain bridge vulnerability that allowed an attacker to mint unbacked SAND on Base and BNB Smart Chain, with the project estimating the direct impact at less than ...</p>\n\n<a href=\"https://crypto.news/sand-bridge-exploit-contained-unbacked-token-mint/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"09009","symbol_name":"博时以太币-U","start_time":0,"source_url":"https://crypto.news/sand-bridge-exploit-contained-unbacked-token-mint/","article_id":"2661219349","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/sand-bridge-exploit-contained-unbacked-token-mint/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2661219349","pubTimestamp":1787396861,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"The Sandbox has contained a cross-chain bridge vulnerability that allowed an attacker to mint unbacked SAND on Base and BNB Smart Chain, with the project estimating the direct impact at less than 0.01% of the token’s 3 billion supply.The Sandbox disabled transfers involving both networks while keeping Ethereum and Polygon SAND unaffected.The Sandbox plans to compensate eligible liquidity providers based on balances recorded before the attack.The Sandbox said it had fully contained the vulnerability affecting its SAND bridge on Base and BNB Smart Chain, adding that no user wallets were compromised and SAND held on Ethereum and Polygon remained secure.The Sandbox team has identified and fully contained a recent vulnerability regarding the SAND cross-chain bridge on Base and BNB Smart Chain . The impact is minimal, representing less than 0.01% of the total SAND token supply.SAND tokens on Ethereum and Polygon are NOT…The size of the minted amount did not represent the project’s direct fin","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"09009":"博时以太币-U","BETE":"等权重比特币&以太币期货ETF-ProShares","03179":"嘉实以太币","CRPT":"First Trust SkyBridge Crypto Industry and Digital Economy ETF","QETH":"以太坊ETF-Invesco Galaxy","ETHD":"ProShares UltraShort Ether ETF","EZET":"以太坊ETF-Franklin","BETH":"比特币&以太币期货ETF-ProShares","ETHE":"最大以太坊ETF-Grayscale","YETH":"Roundhill Ether Covered Call Strategy ETF","09179":"嘉实以太币-U","ETHA":"以太坊ETF-iShares","BEGS":"RAREVIEW 2X BULL CRYPTOCURRENCY & PRECIOUS METALS ETF","BTF":"比特币&以太币期货ETF-CoinShares","ETHI":"Defiance Leveraged Long Income Ethereum ETF","BITQ":"Bitwise Crypto Industry Innovators ETF","CETH":"以太坊ETF-21Shares","AETH":"以太坊策略ETF-Bitwise","CBTJ":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - January","ETTY":"Amplify Ethereum 3% Monthly Option Income Etf","ETCO":"Grayscale Ethereum Covered Call ETF","BITU":"2倍做多比特币期货ETF-Proshares","ETHT":"ProShares Ultra Ether ETF","BFAP":"FT Vest Bitcoin Strategy Floor15 ETF - April","ARKY":"ARK Active Autocallable Income ETF","09046":"华夏以太币-U","ETU":"T-Rex 2X Long Ether Daily Target ETF","03046":"华夏以太币","ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","YBTC":"比特币看涨期权ETF-Roundhill","BKCH":"AdvisorShares Sabretooth ETF","BITW":"Bitwise 10 Crypto Index ETF","ETHU":"2倍以太币期货ETF-Volatility Shares","ESK":"REX-Osprey ETH + Staking ETF","03009":"博时以太币","ETHV":"以太坊ETF-VanEck","SAND":"沙尘暴黄金","SETH":"1倍做空以太币期货ETF-Proshares","BTRN":"比特币期货ETF-Global X","LFGY":"YieldMax Crypto Industry and Tech Portfolio Option Income ETF","ETHW":"以太坊ETF-Bitwise","STCE":"Schwab Crypto Thematic ETF","QBF":"Innovator Uncapped Bitcoin 20 Floor ETF - Quarterly","FETH":"以太币ETF-Fidelity","ETH":"低成本以太坊ETF-Grayscale","EETH":"以太币期货ETF-ProShares","GDLC":"Grayscale CoinDesk Crypto 5 ETF"},"translate_title":"无备份令牌铸币后包含沙桥漏洞","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"09009":0.9,"ARKY":0.9,"BFAP":0.6,"ETHV":0.9,"FETH":0.9,"BETH":0.9,"CBTJ":0.6,"ETCO":0.6,"CRPT":0.9,"YETH":0.9,"BEGS":0.9,"03046":0.9,"ETHE":0.9,"BITU":0.6,"BTRN":0.6,"CETH":0.9,"ETHI":0.6,"GDLC":0.9,"ETHW":0.9,"BITW":0.9,"STCE":0.9,"BTF":0.9,"ESK":0.6,"09046":0.9,"ETTY":0.9,"09179":0.9,"LFGY":0.9,"BETE":0.9,"SAND":1.5,"ETHT":0.9,"QETH":0.9,"03009":0.9,"ETHD":0.9,"METHmain":0.9,"ETHA":0.9,"ETU":0.9,"ETHU":0.9,"ETQ":0.6,"EZET":0.9,"YBTC":0.6,"QBF":0.6,"BITQ":0.9,"SETH":0.6,"EETH":0.9,"BKCH":0.9,"ETH":0.9,"03179":0.9,"AETH":0.9},"content_text":"The Sandbox has contained a cross-chain bridge vulnerability that allowed an attacker to mint unbacked SAND on Base and BNB Smart Chain, with the project estimating the direct impact at less than 0.01% of the token’s 3 billion supply.\n\n\nSummary\n\n\n\nThe attacker minted unbacked SAND on Base and BNB Smart Chain through compromised bridge permissions.\nThe Sandbox disabled transfers involving both networks while keeping Ethereum and Polygon SAND unaffected.\nUpbit and Bithumb halted SAND deposits and withdrawals after detecting a possible security incident.\nOn-chain researchers estimated that about 14.75 million Ethereum-backed SAND left the bridge adapter.\nThe Sandbox plans to compensate eligible liquidity providers based on balances recorded before the attack.\n\n\n\nThe Sandbox said it had fully contained the vulnerability affecting its SAND bridge on Base and BNB Smart Chain, adding that no user wallets were compromised and SAND held on Ethereum and Polygon remained secure.\n\nThe Sandbox team has identified and fully contained a recent vulnerability regarding the SAND cross-chain bridge on Base and BNB Smart Chain (BSC). The impact is minimal, representing less than 0.01% of the total SAND token supply.SAND tokens on Ethereum and Polygon are NOT…— The Sandbox (@TheSandboxGame) August 22, 2026\n\nIn an August 22 statement, the metaverse project said the attacker created tokens on Base and BNB Smart Chain without the SAND needed to back them on Ethereum. The team disabled bridging to and from both networks, isolating the affected tokens and preventing them from being redeemed through the official bridge.\n“All bridged SAND funds are backed by SAND locked on Ethereum, which remains entirely secure,” the project said.\nUsers were told not to buy, sell, or provide liquidity for SAND on Base or BNB Smart Chain while the affected deployments remain isolated. The team is also taking a snapshot from before the attack and said eligible liquidity providers would receive compensation, although it did not give a payment schedule.\nHow the SAND bridge exploit created unbacked tokens\nEarly on-chain alerts showed more than 500 million SAND minted on Base, but the reported figure climbed rapidly as the attacker continued interacting with the contract.\nPeckShield later identified about 14.9 billion SAND created across two addresses. Other security researchers recorded hundreds of additional transactions, producing much larger estimates for the total number of unbacked tokens generated before the bridge was disabled.\n\n#PeckShieldAlert Seems like The @TheSandboxGame  ($SAND) got exploited. 14.9B $SAND minted across 2 addresses: 0xAbE0…4D22 & 0x638C…F296 pic.twitter.com/a5Jgym87gR— PeckShieldAlert (@PeckShieldAlert) August 22, 2026\n\nThe size of the minted amount did not represent the project’s direct financial loss. SAND created on Base or BNB Smart Chain could not increase the Ethereum token’s fixed maximum supply of 3 billion unless the attacker could use the cross-chain system to release genuine tokens locked in the Ethereum adapter.\nAccording to blockchain forensics account BlockWatchdog, the attacker withdrew approximately 14.75 million SAND from the Ethereum adapter in less than one minute. Token sales generated about 80 ETH, valued at roughly $675,000 at the time of the transactions.\nThe figure helps explain why The Sandbox placed the impact below 0.01% of the total SAND supply even though the number of tokens minted on the affected networks appeared far larger. The project has not yet published a full technical report reconciling its loss estimate with the figures reported by individual on-chain researchers.\nBlockaid attributed the incident to the takeover of LayerZero delegate permissions through a approveAndCall function. The security firm said the access allowed the attacker to mint tokens through the affected cross-chain contracts, though The Sandbox has not confirmed Blockaid’s proposed cause in a detailed postmortem.\nWhy Ethereum SAND supply has remained unchanged\nLayerZero’s Omnichain Fungible Token standard uses linked contracts to move assets between blockchains. Under its adapter model, an existing token is locked on its original network while an equivalent amount is minted at the destination.\nFor SAND, the Ethereum adapter holds the original tokens intended to support cross-chain balances. A legitimate transfer to Base should lock SAND on Ethereum before creating the corresponding amount on Base, preserving one supply across the connected networks.\nUnauthorized minting broke the backing relationship on the affected chains, but it did not rewrite the Ethereum token contract or raise its maximum supply. CoinGecko continued to show a maximum supply of 3 billion SAND, with about 2.9 billion tokens in circulation.\nTo stop the affected contracts from communicating with other deployments, The Sandbox removed the LayerZero peer settings for Base and BNB Smart Chain. The action cut off the official route through which unbacked tokens might otherwise have been used to claim assets held by the Ethereum adapter.\nA similar difference between a bridge failure and a problem with the underlying blockchain appeared during July’s Wanchain bridge exploit. About 515 million NIGHT left Wanchain’s Cardano-side treasury, while the Midnight Foundation said its core network, validators and consensus system remained unaffected.\nIn another July incident, an attacker used the Verus bridge’s import path to trigger unbacked asset payouts worth about $7.54 million. Blockaid linked the attack to the same bridge contract and apparent bug class involved in an earlier May breach.\nKorean exchanges restrict SAND transfers\nUpbit issued a caution notice after finding signs of a possible security problem involving SAND, warning that the incident could produce sharp price movements. Bithumb separately suspended SAND deposits and withdrawals while it reviewed the issue.\nReports citing the exchange notices placed Bithumb’s suspension at 11:11 a.m. Korea Standard Time on August 22, followed by Upbit about one minute later. Trading restrictions and transfer suspensions can differ, so users must check each exchange’s notice before placing an order or attempting to move SAND.\nThe quick response is consistent with South Korean exchange procedures for assets facing suspected network faults, abnormal token issuance, or security incidents. Deposit restrictions can limit the chance that tokens created through a compromised network reach an exchange and are sold against unaffected balances.\nSAND traded near $0.05 after the disclosure, while CoinGecko reported more than $66 million in 24-hour volume. The data provider placed the token’s market capitalization near $136 million and showed an increase of about 18% over seven days, though prices varied across trading venues.\nBase users face isolated liquidity risk\nFor U.S. users, the immediate connection comes through Base, the Ethereum layer-2 network developed by U.S.-listed exchange Coinbase. The reported vulnerability affected The Sandbox’s cross-chain contracts deployed on Base rather than Base’s underlying network, according to the available project and security disclosures.\nThe Sandbox’s warning applies to anyone holding or trading the isolated Base version of SAND, including U.S. users accessing decentralized exchanges through self-custody wallets. Tokens available in Base liquidity pools may not carry the same backing as Ethereum-native SAND while the official bridge remains disabled.\nThe incident follows an April attack involving another LayerZero-powered asset. As crypto.news reported, LayerZero’s KelpDAO incident report said attackers stole about 116,500 rsETH worth $292 million after compromising infrastructure used by a single-verifier cross-chain configuration.\nFollowing the KelpDAO attack, LayerZero said its verification network would stop signing messages for applications using a one-of-one verifier setup and encourage projects to adopt multiple independent verifiers. The Sandbox has not said whether its SAND configuration used the same model or whether the latest vulnerability involved LayerZero’s verification network.\nThe Sandbox, an Animoca Brands subsidiary that raised $93 million in 2021, said it would publish further information as its investigation proceeds. Its latest notice did not provide a date for restoring Base and BNB Smart Chain transfers or specify when compensation claims for eligible liquidity providers would open.\n\n\n\n\n\n                Read more:\n            \n\n                NFT sales surge 170% to $95.5M on $55M Pandora trade","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"}}}