The Sandbox Hack

What happened

The Sandbox reported that an attacker exploited bridge configuration contracts on Base and BNB Smart Chain on 21 August 2026, allowing unbacked SAND to be minted without a corresponding Ethereum deposit.

Technical root cause

Bridge configuration permitted minting without verifying the corresponding Ethereum deposit.

How it happened

A bridge-configuration vulnerability on Base and BNB Smart Chain accepted a minting path without the expected backing deposit on Ethereum. The result was unbacked SAND minted across the affected bridge environment.

Protocol details

Classification Gaming / Metaverse / Access Control

Protocol Type Gaming

Category Bridge Hack

Implementation language Solidity

Protocol links Website @TheSandboxGame

Market Context at Time of Hack

Token Price at Hack $0.0438

Market Cap at Hack $128.7M

Reported loss / token market cap 0.52%

Token Categories

Gaming (GameFi) NFT Metaverse Polygon Ecosystem Play To Earn Ethereum Ecosystem Animoca Brands Portfolio Base Ecosystem

Protocol Links

GitHub Discord Telegram

Evidence

• report @TheSandboxGame incident report x.com
• report @coinminutes_en incident report x.com
• report @PeckShieldAlert incident report x.com
• report Web Archive x.com
• report The Sandbox: August 22 Exploit Post-Mortem sandbox.game
• analysis DeFiLlama defillama.com

Understand the attack patterns

Compare incidents →

Access Control Attacks Cross-Chain Bridge Attacks