The Sandbox 2026 Base/BSC bridge-configuration exploit

Timeline events

• Base/BSC bridge configuration exploited2026-08-21

  An attacker exploited contracts associated with The Sandbox SAND bridge configuration on Base and BNB Smart Chain, enabling unbacked SAND minting without corresponding Ethereum deposits and draining backing assets from the Ethereum vault.

  Exploit OccurredHigh

  Nominal synthetic mint face values are excluded from realized loss.

• Affected Base and BNB Smart Chain bridge paths disabled2026-08-22

  The Sandbox disabled bridging on the affected Base and BNB Smart Chain paths during containment and warned users against trading affected SAND representations.

  Bridge PausedHigh

  No unrestricted reopening is inferred.

• The Sandbox publishes SAND compensation claim process2026-09-08

  The Sandbox published its compensation process for users affected by the August exploit, stating that it had committed to a full compensation plan and explaining eligibility and claim mechanics.

  Reimbursement StartedHigh

  Publication of a claim process does not establish completed reimbursement.

Evidence records

• August 22 Exploit Post-Mortem
  The Sandbox · Tier 1 · High reliability · primary · 2026-08-27
  Claim scope: Incident Case

  First-party blog index exposes the August 27 postmortem summary and supports the August 21 23:41 UTC incident boundary, Base/BSC bridge-configuration vulnerability and unbacked mint without a corresponding Ethereum deposit.

• August 22 Exploit Post-Mortem
  The Sandbox · Tier 1 · High reliability · primary · 2026-08-27
  Claim scope: Event

  First-party postmortem publication used for the affected bridge shutdown/containment boundary. The evidence does not establish unrestricted reopening.

• SAND Compensation: How the Claim Process Works
  The Sandbox · Tier 1 · High reliability · primary · 2026-09-08
  Claim scope: Reimbursement

  First-party compensation-process publication. Supports in-progress reimbursement only, not completion.

• The Sandbox Retires SAND Bridge After Exploit, Plans 1:1 Compensation
  Crypto Payments News · Tier 2 · High reliability · secondary · 2026-08-28
  Claim scope: Amount

  Independent postmortem-based coverage supporting 14,742,341.84 SAND / about $697,000 drained from the Ethereum vault and separating realized extraction from nominal unbacked-mint figures.

Source tiers describe evidence authority, not certainty for every claim. Tier 1 is the strongest source class; Tier 2 and Tier 3 provide progressively more secondary or supporting context. Source notes define what each record actually supports.