{"investigation":{"slug":"the-sandbox","entity_name":"The Sandbox","trust_score":42,"severity_base":null,"score_modifier":0,"confidence":0.75,"status":"draft","content_type":"investigation","summary":"The Sandbox is a blockchain-based virtual world platform and its SAND token, operated by Hong Kong-based Animoca Brands since a 2018 acquisition. The project raised hundreds of millions of dollars during the 2021 metaverse boom but has since seen SAND's price fall roughly 99% from its all-time high, a 2025 restructuring that removed both co-founders from operational roles alongside layoffs of over half its staff, and a series of security incidents culminating in an August 2026 cross-chain bridge exploit that allowed an attacker to mint 329.24 trillion unbacked SAND tokens and drain roughly $675,000–$1.5 million in real value from Ethereum-side collateral. The Sandbox contained the exploit within hours, disabled the affected bridges, and announced a treasury-funded 1:1 compensation plan for legitimate holders, but the incident — the third major LayerZero-linked bridge failure in five months industry-wide — adds to a pattern of recurring security lapses (a 2022 Discord/Instagram compromise, a 2023 employee-email phishing breach) and regulatory uncertainty (the SEC has named SAND among unregistered securities in separate enforcement actions) that warrant caution from users and holders.","sections":[{"content":"On 21–22 August 2026, an attacker exploited a vulnerability in the SAND omnichain fungible token (OFT) bridge contracts deployed on Base and BNB Smart Chain (BSC). According to security firm Blockaid and multiple news reports, the attacker abused the token contract's approveAndCall convenience function — which allowed external calls to be routed through the token contract — to have that contract's messages treated as authorized instructions by The Sandbox's LayerZero-based bridge messaging system. This effectively handed the attacker administrative control over parts of the bridge configuration, including LayerZero delegate permissions, allowing unbacked SAND to be minted on Base and BSC without any corresponding deposit on Ethereum. Over roughly five hours and 703 mint events, the attacker created approximately 329.24 trillion unbacked SAND tokens, a figure Blockaid calculated at a notional face value near $49 billion — a number that is economically meaningless given SAND's legitimate capped supply of 3 billion tokens (the mint exceeded that cap by a factor of roughly 110,000). The attacker's actual extraction was far smaller: approximately 14.74–14.75 million SAND was withdrawn from the Ethereum-side OFT vault/adapter contract by submitting fraudulent redemption messages, and the attacker converted proceeds into roughly 80–327 ETH/WETH, reported by different outlets as worth between approximately $675,000 and $1.5 million. The Sandbox disabled bridging on Base at 05:09 UTC and BSC at 05:16 UTC on 22 August 2026, and closed the Ethereum-side contract by 05:26 UTC the same day, according to the company's post-incident account; no further unauthorized withdrawals occurred after 02:21 UTC on 22 August. The Sandbox stated SAND on Ethereum and Polygon was not affected and that the incident represented less than 0.01% of total SAND supply. The company announced a compensation plan on or around 27 August 2026 to reimburse, 1:1 on Ethereum, holders who legitimately held SAND on Base or BSC prior to the exploit, funded from The Sandbox's treasury rather than new token issuance.","heading":"August 2026 Cross-Chain Bridge Exploit","sources":[{"url":"https://thedefiant.io/news/hacks/the-sandbox-says-it-contained-bridge-exploit-that-minted-unbacked-sand-on-base-and-bsc","name":"The Sandbox Says It Contained Bridge Exploit That Minted Unbacked SAND on Base and BSC — The Defiant","type":"news_article","credibility":2},{"url":"https://crypto.news/sandbox-329-trillion-sand-bridge-exploit-675k-stolen/","name":"Sandbox bridge exploit: 329T SAND minted, $675K stolen — crypto.news","type":"news_article","credibility":2},{"url":"https://www.cryptometer.io/news/the-sandbox-exploit-minted-329-trillion-sand-but-only-675000-was-drained/","name":"The Sandbox Exploit Minted 329 Trillion SAND, but Only $675,000 Was Drained — Cryptometer","type":"news_article","credibility":2},{"url":"https://egamers.io/inside-the-sandbox-bridge-hack-attacker-minted-exactly-100-sand-short-of-the-vault/","name":"Inside The Sandbox Bridge Hack: Attacker Minted Exactly 100 SAND Short Of The Vault — EGamers.io","type":"news_article","credibility":2},{"url":"https://metaversestreetjournal.com/2026/08/29/august-22-exploit-inside-the-sandbox-breach-and-what-went-wrong/","name":"August 22 Exploit: Inside the Sandbox Breach and What Went Wrong — The Metaverse Street Journal","type":"news_article","credibility":2},{"url":"https://coinpaprika.com/news/sandbox-halts-base-bnb-bridges-exploit-49b/","name":"The Sandbox Halts Base and BNB Bridges After Exploit Mints $49B in Phantom SAND — Coinpaprika","type":"news_article","credibility":2},{"url":"https://x.com/TheSandboxGame/status/2092905959723045174","name":"The Sandbox official post-incident thread — X (@TheSandboxGame)","type":"official","credibility":2}],"severity":"critical"},{"content":"Following disclosure of the exploit, South Korean exchanges Upbit and Bithumb suspended SAND deposits and withdrawals under South Korea's user-protection regulations; Upbit reportedly halted activity even on Ethereum, the chain The Sandbox said was unaffected, reflecting exchange-side caution beyond the company's own risk assessment. SAND's price fell roughly 10% intraday around the exploit's disclosure. Separately, Coinbase discontinued perpetual futures contracts for SAND (SAND-PERP) on 26 August 2026 as part of a broader delisting of ten low-volume perpetual contracts; reporting indicates this was framed by Coinbase as a routine review of trading volume, liquidity, and regulatory posture rather than an action taken explicitly because of the bridge exploit, though the timing coincided closely with the incident and was widely reported alongside it.","heading":"Market and Exchange Fallout from the Exploit","sources":[{"url":"https://crypto.news/sand-bridge-exploit-contained-unbacked-token-mint/","name":"SAND bridge exploit contained after unbacked token mint — crypto.news","type":"news_article","credibility":2},{"url":"https://cryptorank.io/news/feed/a9298-coinbase-delist-perpetual-futures-sand","name":"Coinbase to Delist 10 Perpetual Futures, Including SAND, on Aug. 26 — CryptoRank","type":"news_article","credibility":2},{"url":"https://news.bitcoin.com/security/sandbox-sand-bridge-exploit-unbacked-tokens/","name":"Sandbox Bridge Hack Mints 14.9B SAND While Coinbase Delists Futures — News.Bitcoin.com","type":"news_article","credibility":2}],"severity":"medium"},{"content":"The August 2026 Sandbox exploit was reported as the third major LayerZero-linked bridge security failure within five months. On 6 March 2026, an attacker reportedly socially engineered a LayerZero Labs developer to obtain session keys granting access to internal RPC cloud infrastructure. On 18 April 2026, the Kelp DAO LayerZero-powered bridge was exploited for approximately 116,500 rsETH (~$292 million), described as the largest crypto exploit of 2026 at the time, stemming from a single-verifier configuration weakness. These incidents, together with the Sandbox exploit, accelerated an industry-wide migration away from LayerZero toward Chainlink's CCIP cross-chain messaging protocol; by mid-August 2026, publicly announced migrations away from LayerZero totaled roughly $15 billion, led by entities including BitGo, Kraken, Solv Protocol, Mantle, and Lombard. This pattern suggests the Sandbox exploit reflects a broader, protocol-level risk in LayerZero-based bridge deployments rather than an isolated failure unique to The Sandbox's own engineering, though The Sandbox's specific contract design (registering its token contract as a trusted bridge application) was the proximate vulnerability exploited.","heading":"Industry Context: LayerZero's Repeated Bridge Failures","sources":[{"url":"https://www.coindesk.com/business/2026/08/04/bitgo-s-wbtc-move-pushes-layerzero-to-chainlink-tally-near-usd15-billion","name":"BitGo's WBTC move pushes LayerZero-to-Chainlink tally near $15 billion — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.coindesk.com/business/2026/07/09/over-usd7-2-billion-have-migrated-from-layerzero-to-chainlink-ccip-as-mantle-joins-exodus","name":"Over $7.2 billion have migrated from LayerZero to Chainlink CCIP as Mantle joins exodus — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.coindesk.com/business/2026/05/14/kraken-to-replace-layerzero-with-chainlink-to-bridge-assets-across-blockchains","name":"Kraken to replace LayerZero with Chainlink for kBTC, future wrapped assets — CoinDesk","type":"news_article","credibility":1},{"url":"https://crypto.news/layerzero-chainlink-exodus-15-billion-bridge-migration/","name":"$15B exodus: why crypto is leaving LayerZero for Chainlink — crypto.news","type":"news_article","credibility":2}],"severity":"high"},{"content":"The August 2026 bridge exploit was not The Sandbox's first security or trust incident. In March 2023, The Sandbox disclosed that an unauthorized third party had accessed a single employee's computer and used it to send a fraudulent email titled \"The Sandbox Game (PURELAND) Access\" (sent 26 February 2023) to users, containing links that could install malware giving the attacker control over a victim's computer. The Sandbox stated the intrusion was limited to that one employee's machine and did not extend to other company systems, and said it reset passwords, blocked the compromised account, and enforced two-factor authentication company-wide in response. In September 2022, hackers compromised The Sandbox's Discord server and Instagram account, posting fake giveaway links and attempting to rent the company's Bored Ape Yacht Club NFTs from users; the company regained control of its accounts, and at least one user was reported to have lost NFTs after interacting with the fake content. Separately, The Sandbox brand has been repeatedly used by unaffiliated scammers in phishing campaigns and fake-airdrop websites impersonating the platform (e.g., fraudulent domains mimicking sandbox.game), for which the company has issued public phishing warnings; these copycat scams are not security failures of The Sandbox's own infrastructure but represent an ongoing risk to users searching for or engaging with the brand online.","heading":"Prior Security Incidents","sources":[{"url":"https://www.theblock.co/post/216471/the-sandbox-warns-users-of-security-breach-used-for-email-phishing-campaign","name":"The Sandbox warns users of security breach used for email phishing campaign — The Block","type":"news_article","credibility":2},{"url":"https://www.coindesk.com/business/2023/03/02/blockchain-game-the-sandbox-warns-of-phishing-email-after-security-breach","name":"Blockchain Game The Sandbox Warns of Phishing Email After Security Breach — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.bleepingcomputer.com/news/security/sandbox-blockchain-game-breached-to-send-emails-linking-to-malware/","name":"Sandbox blockchain game breached to send emails linking to malware — BleepingComputer","type":"news_article","credibility":2},{"url":"https://www.business2community.com/nft-news/hacker-attack-the-sandboxs-social-account-and-try-to-rent-nfts-02547101","name":"Hackers Attack The Sandbox's Social Accounts And Try To Rent NFTs — Business2Community","type":"news_article","credibility":3},{"url":"https://crypto.news/the-sandbox-issues-phishing-alert-for-new-scam/","name":"The Sandbox issues phishing alert for new scam — crypto.news","type":"news_article","credibility":2}],"severity":"medium"},{"content":"SAND has been named by the U.S. Securities and Exchange Commission among tokens it characterized as unregistered securities in separate enforcement contexts — including its 2023 lawsuit against Binance (which listed SAND alongside SOL, ADA, MATIC, FIL, ATOM, MANA, ALGO, AXS, and COTI as alleged unregistered securities) and later in an action involving Consensys/MetaMask Swaps. The Sandbox's leadership publicly disputed this characterization; the company's COO stated \"we do not necessarily agree with the characterization... including the qualification of SAND as a security,\" and noted The Sandbox itself was not directly named as a defendant in that litigation. No SEC enforcement action has been confirmed as filed directly against The Sandbox or Animoca Brands over SAND's token status as of this writing, but the classification dispute creates ongoing regulatory uncertainty for U.S. users and exchanges listing the token.","heading":"Regulatory Status: SEC Security Classification","sources":[{"url":"https://decrypt.co/143707/sandbox-does-not-agree-sec-labeling-sand-token-security","name":"Sandbox COO: 'We Do Not Agree' With SEC Labeling SAND Token a Security — Decrypt","type":"news_article","credibility":2},{"url":"https://blockworks.co/news/sec-10-tokens-securities","name":"SEC Labels 10 Tokens Securities in Binance Lawsuit — Blockworks","type":"news_article","credibility":2},{"url":"https://hackernoon.com/sec-challenges-sand-tokens-security-status","name":"SEC Challenges SAND Token's Security Status — HackerNoon","type":"news_article","credibility":3}],"severity":"medium"},{"content":"The Sandbox originated as Pixowl, a mobile game studio founded in 2011 by Arthur Madrid, Sébastien Borget, and Adrien Duermaël, whose 2D world-building game The Sandbox was named one of Apple's Best Games of 2012. In August 2018, Hong Kong-based Animoca Brands acquired Pixowl for approximately $4.875 million and directed a pivot to a blockchain-based 3D virtual world using NFTs and the SAND utility/governance token, launched under Animoca's ownership starting October 2018. The Sandbox raised approximately $2 million in an initial 2020 SAND sale and a $93 million Series B round in November 2021 from investors including SoftBank, Samsung Next, and LG Technology Ventures, for a total of roughly $300 million raised over its history. In 2025, amid what reporting described as growing dissatisfaction with the platform's failure to gain sustained user traction despite its funding, Animoca restructured The Sandbox: co-founders Sébastien Borget and Arthur Madrid were removed from executive/operational roles (Borget becoming a public 'ambassador,' Madrid becoming non-executive chairman), Animoca Brands CEO Robby Yung was appointed CEO of The Sandbox, and more than 50% of the company's roughly 250-person staff was laid off, with several international offices closed. The restructuring was accompanied by a strategic shift away from the core metaverse/virtual-land business toward broader Web3 products, including a memecoin launch platform built on Base — the same chain later affected by the August 2026 bridge exploit. Animoca Brands itself, The Sandbox's controlling parent, was fined in 2022 by the Australian Securities and Investments Commission over unlodged annual reports (2019–2021), and in September 2026 suspended a planned merger deal with Currenc Group that would have taken Animoca public.","heading":"Corporate Structure, Ownership, and 2025 Restructuring","sources":[{"url":"https://en.wikipedia.org/wiki/The_Sandbox_(company)","name":"The Sandbox (company) — Wikipedia","type":"other","credibility":2},{"url":"https://blockworks.com/news/sandbox-co-founders-ousted-layoffs","name":"The Sandbox co-founders ousted from exec roles amid mass layoffs — Blockworks","type":"news_article","credibility":2},{"url":"https://finance.yahoo.com/news/sandbox-founders-exit-animoca-assumes-103340567.html","name":"The Sandbox Founders Exit as Animoca Assumes Full Control in Major Overhaul — Yahoo Finance/Cryptonews","type":"news_article","credibility":2},{"url":"https://phemex.com/news/article/the-sandbox-restructures-founders-resign-50-staff-laid-off-16458","name":"The Sandbox Restructures: Founders Resign, 50% Staff Laid Off — Phemex News","type":"news_article","credibility":2},{"url":"https://www.theblock.co/news/business/2026-09-21-animoca-brands-suspends-merger-deal-415991","name":"Animoca Brands suspends merger deal that would have taken it public — The Block","type":"news_article","credibility":1}],"severity":"high"},{"content":"SAND reached an all-time high near $8.40 in November 2021 during the peak of metaverse-sector speculation, driven in part by high-profile virtual land sales (a December 2021 land parcel transaction between Atari SA and Republic Realm was valued at $4.3 million) and celebrity/brand landowners including Snoop Dogg and Paris Hilton. The token subsequently declined roughly 95% during 2022 alone and has continued to fall since, trading in the $0.04–$0.12 range through 2026 — down approximately 99% from its peak — alongside a broader collapse in metaverse-sector interest, low sustained user engagement with virtual worlds, and high transaction costs that reporting describes as having discouraged adoption. This sustained decline is a market-performance observation rather than an allegation of misconduct, but it is directly relevant to assessing the platform's ongoing viability and the risk profile of holding SAND or virtual land assets on the platform.","heading":"Token Performance and Market Decline","sources":[{"url":"https://www.bydfi.com/en/cointalk/sandbox-sand-price-2026-analysis","name":"Sandbox Price 2026: Why SAND Is Down 95% from Its Peak — BYDFi","type":"research","credibility":3},{"url":"https://www.coingecko.com/en/coins/the-sandbox","name":"The Sandbox Price: SAND/USD Live Price Chart, Market Cap & News Today — CoinGecko","type":"on_chain","credibility":2}],"severity":"medium"}],"timeline":[{"date":"2011","event":"Pixowl founded by Arthur Madrid, Sébastien Borget, and Adrien Duermaël; the 2D mobile game 'The Sandbox' later launches and is named an Apple Best Game of 2012.","source":"The Sandbox (company) — Wikipedia","source_url":"https://en.wikipedia.org/wiki/The_Sandbox_(company)"},{"date":"2018-08","event":"Animoca Brands acquires Pixowl for approximately $4.875 million and begins pivoting the franchise into a blockchain-based 3D virtual world (relaunched as The Sandbox in October 2018).","source":"The Sandbox (company) — Wikipedia","source_url":"https://en.wikipedia.org/wiki/The_Sandbox_(company)"},{"date":"2021-11","event":"The Sandbox closes a $93 million Series B round from investors including SoftBank, Samsung Next, and LG Technology Ventures; SAND reaches its all-time high near $8.40.","source":"The Sandbox (company) — Wikipedia; BYDFi price analysis","source_url":"https://en.wikipedia.org/wiki/The_Sandbox_(company)"},{"date":"2022-09","event":"Hackers compromise The Sandbox's Discord and Instagram accounts, posting fake giveaway links and attempting to rent the company's Bored Ape NFTs; at least one user reportedly lost NFTs.","source":"Business2Community","source_url":"https://www.business2community.com/nft-news/hacker-attack-the-sandboxs-social-account-and-try-to-rent-nfts-02547101"},{"date":"2023-03-02","event":"The Sandbox discloses that an employee's computer was compromised and used to send a phishing email (sent Feb. 26, 2023) containing malware links to users.","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2023/03/02/blockchain-game-the-sandbox-warns-of-phishing-email-after-security-breach","date_evidence":"The Sandbox said this in a blog post Thursday on March 2, 2023."},{"date":"2023","event":"SEC names SAND among tokens characterized as unregistered securities in its lawsuit against Binance; The Sandbox's COO publicly disputes the characterization.","source":"Decrypt","source_url":"https://decrypt.co/143707/sandbox-does-not-agree-sec-labeling-sand-token-security"},{"date":"2025","event":"Animoca Brands restructures The Sandbox: co-founders Sébastien Borget and Arthur Madrid removed from executive roles, Animoca CEO Robby Yung installed as The Sandbox CEO, and over 50% of staff laid off amid a strategic pivot away from the core metaverse business.","source":"Blockworks","source_url":"https://blockworks.com/news/sandbox-co-founders-ousted-layoffs"},{"date":"2026-03-06","event":"An attacker socially engineers a LayerZero Labs developer, gaining access to internal RPC cloud infrastructure — the first of a series of LayerZero-linked incidents in 2026.","source":"Industry reporting via WebSearch synthesis (CoinDesk migration coverage)","source_url":"https://www.coindesk.com/business/2026/08/04/bitgo-s-wbtc-move-pushes-layerzero-to-chainlink-tally-near-usd15-billion","date_evidence":"the Kelp DAO exploit on April 18, 2026... on March 6, 2026, an attacker socially engineered a LayerZero Labs developer"},{"date":"2026-04-18","event":"Kelp DAO's LayerZero-powered bridge is exploited for approximately 116,500 rsETH (~$292 million), the largest crypto exploit of 2026 to that point.","source":"CoinDesk (via search synthesis)","source_url":"https://www.coindesk.com/business/2026/08/04/bitgo-s-wbtc-move-pushes-layerzero-to-chainlink-tally-near-usd15-billion","date_evidence":"The Kelp DAO exploit on April 18, 2026 drained 116,500 rsETH, worth $292 million"},{"date":"2026-08-21","event":"Attacker begins exploiting the SAND OFT bridge contract on Base at 23:41 UTC, hijacking LayerZero delegate permissions via the approveAndCall function.","source":"Metaverse Street Journal","source_url":"https://metaversestreetjournal.com/2026/08/29/august-22-exploit-inside-the-sandbox-breach-and-what-went-wrong/","date_evidence":"Attack Start: August 21, 2026 at 23:41 UTC"},{"date":"2026-08-22","event":"The Sandbox discovers the exploit (03:15 UTC) and disables bridging at contract level on Base, BNB Smart Chain, and Ethereum between 05:09 and 05:26 UTC, containing further unauthorized withdrawals.","source":"Metaverse Street Journal","source_url":"https://metaversestreetjournal.com/2026/08/29/august-22-exploit-inside-the-sandbox-breach-and-what-went-wrong/","date_evidence":"Discovery: August 22, 2026 at 03:15 UTC... Base (05:09 UTC), BNB Smart Chain (05:16 UTC), Ethereum (05:25:59 UTC)"},{"date":"2026-08","event":"South Korean exchanges Upbit and Bithumb suspend SAND deposits/withdrawals; SAND price falls roughly 10% intraday.","source":"EGamers.io / crypto.news","source_url":"https://coinpaprika.com/news/sandbox-halts-base-bnb-bridges-exploit-49b/","date_original":"2026-08-22"},{"date":"2026-08","event":"Coinbase discontinues SAND perpetual futures contracts (SAND-PERP) as part of a broader delisting of ten low-volume perpetual contracts.","source":"CryptoRank","source_url":"https://cryptorank.io/news/feed/a9298-coinbase-delist-perpetual-futures-sand","date_original":"2026-08-26"},{"date":"2026-08","event":"The Sandbox announces a treasury-funded 1:1 compensation plan on Ethereum for holders who legitimately held SAND on Base or BSC before the exploit.","source":"crypto.news","source_url":"https://crypto.news/sandbox-329-trillion-sand-bridge-exploit-675k-stolen/","date_original":"2026-08-27"},{"date":"2026-09","event":"Animoca Brands, The Sandbox's parent company, suspends a planned merger deal with Currenc Group that would have taken Animoca public.","source":"The Block","source_url":"https://www.theblock.co/news/business/2026-09-21-animoca-brands-suspends-merger-deal-415991","date_original":"2026-09-21"}],"sources_used":[{"url":"https://thedefiant.io/news/hacks/the-sandbox-says-it-contained-bridge-exploit-that-minted-unbacked-sand-on-base-and-bsc","name":"The Sandbox Says It Contained Bridge Exploit That Minted Unbacked SAND on Base and BSC — The Defiant","type":"news_article","archive_url":"http://web.archive.org/web/20260822173735/https://thedefiant.io/news/hacks/the-sandbox-says-it-contained-bridge-exploit-that-minted-unbacked-sand-on-base-and-bsc","credibility":2,"archive_timestamp":"2026-08-22T17:37:35+00:00"},{"url":"https://crypto.news/sandbox-329-trillion-sand-bridge-exploit-675k-stolen/","name":"Sandbox bridge exploit: 329T SAND minted, $675K stolen — crypto.news","type":"news_article","archive_url":"http://web.archive.org/web/20260830072221/https://crypto.news/sandbox-329-trillion-sand-bridge-exploit-675k-stolen/","credibility":2,"archive_timestamp":"2026-08-30T07:22:21+00:00"},{"url":"https://www.cryptometer.io/news/the-sandbox-exploit-minted-329-trillion-sand-but-only-675000-was-drained/","name":"The Sandbox Exploit Minted 329 Trillion SAND, but Only $675,000 Was Drained — Cryptometer","type":"news_article","archive_url":"https://web.archive.org/web/20260922211606/https://www.cryptometer.io/news/the-sandbox-exploit-minted-329-trillion-sand-but-only-675000-was-drained/","credibility":2,"archive_timestamp":"2026-09-22T21:16:06+00:00"},{"url":"https://egamers.io/inside-the-sandbox-bridge-hack-attacker-minted-exactly-100-sand-short-of-the-vault/","name":"Inside The Sandbox Bridge Hack: Attacker Minted Exactly 100 SAND Short Of The Vault — EGamers.io","type":"news_article","archive_url":"https://web.archive.org/web/20260922210304/https://egamers.io/fake-flower-solana-airdrop-spreads-from-yakkamons-stolen-x-account/?rbsnp=1","credibility":2,"archive_timestamp":"2026-09-22T21:03:04+00:00"},{"url":"https://metaversestreetjournal.com/2026/08/29/august-22-exploit-inside-the-sandbox-breach-and-what-went-wrong/","name":"August 22 Exploit: Inside the Sandbox Breach and What Went Wrong — The Metaverse Street Journal","type":"news_article","archive_url":null,"credibility":2,"archive_timestamp":null},{"url":"https://coinpaprika.com/news/sandbox-halts-base-bnb-bridges-exploit-49b/","name":"The Sandbox Halts Base and BNB Bridges After Exploit Mints $49B in Phantom SAND — Coinpaprika","type":"news_article","archive_url":"http://web.archive.org/web/20260826193741/https://coinpaprika.com/news/sandbox-halts-base-bnb-bridges-exploit-49b/","credibility":2,"archive_timestamp":"2026-08-26T19:37:41+00:00"},{"url":"https://x.com/TheSandboxGame/status/2092905959723045174","name":"The Sandbox official post-incident thread — X (@TheSandboxGame)","type":"official","archive_url":null,"credibility":2,"archive_timestamp":null},{"url":"https://crypto.news/sand-bridge-exploit-contained-unbacked-token-mint/","name":"SAND bridge exploit contained after unbacked token mint — crypto.news","type":"news_article","archive_url":"http://web.archive.org/web/20260921121604/https://crypto.news/sand-bridge-exploit-contained-unbacked-token-mint/","credibility":2,"archive_timestamp":"2026-09-21T12:16:04+00:00"},{"url":"https://cryptorank.io/news/feed/a9298-coinbase-delist-perpetual-futures-sand","name":"Coinbase to Delist 10 Perpetual Futures, Including SAND, on Aug. 26 — CryptoRank","type":"news_article","archive_url":"http://web.archive.org/web/20260902204706/https://cryptorank.io/news/feed/a9298-coinbase-delist-perpetual-futures-sand","credibility":2,"archive_timestamp":"2026-09-02T20:47:06+00:00"},{"url":"https://news.bitcoin.com/security/sandbox-sand-bridge-exploit-unbacked-tokens/","name":"Sandbox Bridge Hack Mints 14.9B SAND While Coinbase Delists Futures — News.Bitcoin.com","type":"news_article","archive_url":"http://web.archive.org/web/20260914082752/https://news.bitcoin.com/security/sandbox-sand-bridge-exploit-unbacked-tokens/","credibility":2,"archive_timestamp":"2026-09-14T08:27:52+00:00"},{"url":"https://www.coindesk.com/business/2026/08/04/bitgo-s-wbtc-move-pushes-layerzero-to-chainlink-tally-near-usd15-billion","name":"BitGo's WBTC move pushes LayerZero-to-Chainlink tally near $15 billion — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260805082031/https://www.coindesk.com/business/2026/08/04/bitgo-s-wbtc-move-pushes-layerzero-to-chainlink-tally-near-usd15-billion","credibility":1,"archive_timestamp":"2026-08-05T08:20:31+00:00"},{"url":"https://www.coindesk.com/business/2026/07/09/over-usd7-2-billion-have-migrated-from-layerzero-to-chainlink-ccip-as-mantle-joins-exodus","name":"Over $7.2 billion have migrated from LayerZero to Chainlink CCIP as Mantle joins exodus — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260710113305/https://www.coindesk.com/business/2026/07/09/over-usd7-2-billion-have-migrated-from-layerzero-to-chainlink-ccip-as-mantle-joins-exodus","credibility":1,"archive_timestamp":"2026-07-10T11:33:05+00:00"},{"url":"https://www.coindesk.com/business/2026/05/14/kraken-to-replace-layerzero-with-chainlink-to-bridge-assets-across-blockchains","name":"Kraken to replace LayerZero with Chainlink for kBTC, future wrapped assets — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260726100531/https://www.coindesk.com/business/2026/05/14/kraken-to-replace-layerzero-with-chainlink-to-bridge-assets-across-blockchains","credibility":1,"archive_timestamp":"2026-07-26T10:05:31+00:00"},{"url":"https://crypto.news/layerzero-chainlink-exodus-15-billion-bridge-migration/","name":"$15B exodus: why crypto is leaving LayerZero for Chainlink — crypto.news","type":"news_article","archive_url":"http://web.archive.org/web/20260916061952/https://crypto.news/layerzero-chainlink-exodus-15-billion-bridge-migration/","credibility":2,"archive_timestamp":"2026-09-16T06:19:52+00:00"},{"url":"https://www.theblock.co/post/216471/the-sandbox-warns-users-of-security-breach-used-for-email-phishing-campaign","name":"The Sandbox warns users of security breach used for email phishing campaign — The Block","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.coindesk.com/business/2023/03/02/blockchain-game-the-sandbox-warns-of-phishing-email-after-security-breach","name":"Blockchain Game The Sandbox Warns of Phishing Email After Security Breach — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260915163112/https://www.coindesk.com/business/2023/03/02/blockchain-game-the-sandbox-warns-of-phishing-email-after-security-breach","credibility":1,"archive_timestamp":"2026-09-15T16:31:12+00:00"},{"url":"https://www.bleepingcomputer.com/news/security/sandbox-blockchain-game-breached-to-send-emails-linking-to-malware/","name":"Sandbox blockchain game breached to send emails linking to malware — BleepingComputer","type":"news_article","archive_url":"http://web.archive.org/web/20260920144108/https://www.bleepingcomputer.com/news/security/sandbox-blockchain-game-breached-to-send-emails-linking-to-malware/","credibility":2,"archive_timestamp":"2026-09-20T14:41:08+00:00"},{"url":"https://www.business2community.com/nft-news/hacker-attack-the-sandboxs-social-account-and-try-to-rent-nfts-02547101","name":"Hackers Attack The Sandbox's Social Accounts And Try To Rent NFTs — Business2Community","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://crypto.news/the-sandbox-issues-phishing-alert-for-new-scam/","name":"The Sandbox issues phishing alert for new scam — crypto.news","type":"news_article","archive_url":"http://web.archive.org/web/20251007033648/https://crypto.news/the-sandbox-issues-phishing-alert-for-new-scam/","credibility":2,"archive_timestamp":"2025-10-07T03:36:48+00:00"},{"url":"https://decrypt.co/143707/sandbox-does-not-agree-sec-labeling-sand-token-security","name":"Sandbox COO: 'We Do Not Agree' With SEC Labeling SAND Token a Security — Decrypt","type":"news_article","archive_url":"http://web.archive.org/web/20260421125711/https://decrypt.co/143707/sandbox-does-not-agree-sec-labeling-sand-token-security","credibility":2,"archive_timestamp":"2026-04-21T12:57:11+00:00"},{"url":"https://blockworks.co/news/sec-10-tokens-securities","name":"SEC Labels 10 Tokens Securities in Binance Lawsuit — Blockworks","type":"news_article","archive_url":"http://web.archive.org/web/20251008030512/https://blockworks.co/news/sec-10-tokens-securities","credibility":2,"archive_timestamp":"2025-10-08T03:05:12+00:00"},{"url":"https://hackernoon.com/sec-challenges-sand-tokens-security-status","name":"SEC Challenges SAND Token's Security Status — HackerNoon","type":"news_article","archive_url":"http://web.archive.org/web/20251018211609/https://hackernoon.com/sec-challenges-sand-tokens-security-status","credibility":3,"archive_timestamp":"2025-10-18T21:16:09+00:00"},{"url":"https://en.wikipedia.org/wiki/The_Sandbox_(company)","name":"The Sandbox (company) — Wikipedia","type":"other","archive_url":"http://web.archive.org/web/20260721161309/https://en.wikipedia.org/wiki/The_Sandbox_(company)","credibility":2,"archive_timestamp":"2026-07-21T16:13:09+00:00"},{"url":"https://blockworks.com/news/sandbox-co-founders-ousted-layoffs","name":"The Sandbox co-founders ousted from exec roles amid mass layoffs — Blockworks","type":"news_article","archive_url":"http://web.archive.org/web/20260802235535/https://blockworks.com/news/sandbox-co-founders-ousted-layoffs","credibility":2,"archive_timestamp":"2026-08-02T23:55:35+00:00"},{"url":"https://finance.yahoo.com/news/sandbox-founders-exit-animoca-assumes-103340567.html","name":"The Sandbox Founders Exit as Animoca Assumes Full Control in Major Overhaul — Yahoo Finance/Cryptonews","type":"news_article","archive_url":"http://web.archive.org/web/20260922171723/https://finance.yahoo.com/news/sandbox-founders-exit-animoca-assumes-103340567.html","credibility":2,"archive_timestamp":"2026-09-22T17:17:23+00:00"},{"url":"https://phemex.com/news/article/the-sandbox-restructures-founders-resign-50-staff-laid-off-16458","name":"The Sandbox Restructures: Founders Resign, 50% Staff Laid Off — Phemex News","type":"news_article","archive_url":"https://web.archive.org/web/20260922171824/https://phemex.com/news/article/the-sandbox-restructures-founders-resign-50-staff-laid-off-16458","credibility":2,"archive_timestamp":"2026-09-22T17:18:24+00:00"},{"url":"https://www.theblock.co/news/business/2026-09-21-animoca-brands-suspends-merger-deal-415991","name":"Animoca Brands suspends merger deal that would have taken it public — The Block","type":"news_article","archive_url":null,"credibility":1,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.bydfi.com/en/cointalk/sandbox-sand-price-2026-analysis","name":"Sandbox Price 2026: Why SAND Is Down 95% from Its Peak — BYDFi","type":"research","archive_url":"http://web.archive.org/web/20260812171046/https://www.bydfi.com/en/cointalk/sandbox-sand-price-2026-analysis","credibility":3,"archive_timestamp":"2026-08-12T17:10:46+00:00"},{"url":"https://www.coingecko.com/en/coins/the-sandbox","name":"The Sandbox Price: SAND/USD Live Price Chart, Market Cap & News Today — CoinGecko","type":"on_chain","archive_url":"http://web.archive.org/web/20260317084414/https://www.coingecko.com/en/coins/the-sandbox","credibility":2,"archive_timestamp":"2026-03-17T08:44:14+00:00"}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-investigator","created_at":"2026-09-22T17:12:49.425097+00:00","updated_at":"2026-09-22T21:21:16.856801+00:00"}}