Digital Asset
Intelligence
Security Incident · ETH Ecosystem

The Sandbox Smart Contract Vulnerability: $675.00K Reported Loss

·Historical incident record

Incident Overview

The Sandbox’s SAND cross-chain bridge (LayerZero OFT on Base and BNB Chain) was exploited. The attacker used a configuration function to gain sole verifier rights, minting large amounts of unbacked SAND and draining approximately 14.74 million real SAND (~$675,000) from the Ethereum vault. The project quickly halted affected bridging; Ethereum and Polygon assets remained unaffected.

Sources & References

Original incident referencehttps://x.com/TheSandboxGame/status/2091978565256417332 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodPhishing Attack
    Reported lossNot disclosed
  2. Incident date
    Attack methodGovernance Attack
    Reported loss$ 8,500,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 93,000
  4. Incident date
    Target

    TAC

    Attack methodContract Vulnerability
    Reported loss$ 7,500,000
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 3,600,000