Skip to main content
Sign in

The Sandbox (SAND OFT Exploit)

avoid.net/the-sandbox-sand-oft-exploit→42/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

Summary

On August 21-22, 2026, an attacker exploited a configuration flaw in The Sandbox's SAND omnichain fungible token (OFT) contract on Base, hijacking LayerZero delegate permissions via the approveAndCall function to mint 329.24 trillion unbacked SAND tokens across 703 events over approximately five hours. Despite a nominal face-value figure of roughly $49 billion, actual liquid losses were contained to approximately 14.75 million SAND (~$675,000) and 79.74 ETH drained from the Ethereum OFT Adapter. The Sandbox halted Base and BNB Smart Chain bridges, removed LayerZero peer settings via multisig, and subsequently announced a 1:1 treasury-funded compensation plan for affected liquidity providers using a pre-exploit snapshot.

Connected Entities

1 entities
Organizations
□The Sandbox (SAND OFT Exploit)
Relationships
    Have evidence about The Sandbox (SAND OFT Exploit)?

    Timeline(9 events)

    21 August 2026

    Attack begins at approximately 23:42:05 UTC. Attacker exploits approveAndCall on SAND's OFT contract on Base, hijacking LayerZero delegate permissions and beginning unbacked SAND minting.

    CryptoTimes

    22 August 2026

    At approximately 01:22:11 UTC, the Ethereum OFT Adapter is drained to near-zero; approximately 14,769,723 SAND is withdrawn and converted to roughly 79.74 ETH (~$675,000).

    CryptoTimes

    22 August 2026

    Blockaid issues a real-time public alert on X reporting an ongoing exploit on The Sandbox's SAND OFT on Base, citing $49 billion face-value minted across 400+ transactions.

    Blockaid on X

    22 August 2026

    Minting activity stops at approximately 04:45:21 UTC after approximately five hours. Total minted: 329.24 trillion unbacked SAND across 703 events.

    CryptoTimes

    22 August 2026

    The Sandbox multisig removes LayerZero peer settings at approximately 05:09:19 UTC. Base and BNB Smart Chain bridges disabled. Ethereum and Polygon SAND confirmed unaffected.

    CryptoTimes

    22 August 2026

    Upbit and Bithumb halt SAND deposits and withdrawals at 11:11 KST. Coinbase delists SAND futures. SAND price declines 5.5–10% intraday.

    CryptoTimes

    24 August 2026

    Upbit designates SAND as an investment warning asset effective 15:00 KST under Article 17 of the Virtual Asset User Protection Act, affecting SAND/KRW and SAND/BTC pairs. Review window extends through early October 2026.

    CryptoTimes

    27 August 2026

    The Sandbox announces 1:1 treasury-funded compensation plan for affected SAND holders on Base and BNB Smart Chain, using pre-exploit snapshots (Base block 50,283,176; BSC block 117,321,965). Claims portal expected within two weeks.

    CryptoTimes

    28 August 2026

    Brinztech publishes an incident report classifying the event as a critical configuration and permission flaw in the SAND OFT bridge infrastructure.

    Brinztech Breach Alerts
    Provenance & Audit Trail
    18 Wayback Archives

    Decision Log

    • #1publish⛓ pending8/30/2026, 12:10:18 PM
      hash: BXSjvRdnpR4eVZSrK4gNv7HHuhu2iYPty9gzynwAQjDh

    18 of 22 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 8/30/2026, 12:10:08 PM

    last updated: 9/1/2026, 12:55:59 PM

    avoid.net — verified advice for a post-truth world