Billions of Unbacked SAND Tokens Minted in Exploit, Forcing Bridge Shutdown

banner-image

The web3 gaming network paused cross-chain transfers on two networks after an attacker allegedly created unbacked SAND tokens.

The Sandbox has stopped users from bridging its SAND token between Base and BNB Chain after detecting an exploit, according to CoinDesk. CryptoBriefing reported the breach let an attacker mint billions of unbacked SAND tokens, raising concerns about the integrity of the token's circulating supply.

The Sandbox is a web3 gaming and virtual land platform where players buy, build, and trade digital assets using SAND. The token also functions as a governance and utility asset across the platform's marketplace and metaverse experiences. Because SAND exists on multiple chains, the project relies on bridge infrastructure to let holders move tokens between networks like Ethereum, Base, and BNB Chain.

Bridges have long been a weak point in crypto infrastructure. They must mint or release tokens on a destination chain once tokens are locked or burned on the source chain. If that accounting logic is manipulated, an attacker can create tokens without providing genuine backing. That appears to be the mechanism at the center of this incident, based on the reporting so far.

Pausing bridging is a standard emergency response for projects facing this kind of exploit. Halting transfers prevents further unbacked tokens from moving across chains or reaching exchanges, where they could be sold before the supply issue is addressed. It also buys the team time to trace the attack, assess damage, and determine whether a patch or token migration is needed.

Details on the exact vulnerability, the scale of financial impact, and any user fund exposure had not been fully disclosed at the time of reporting. It also remains unclear whether the exploit affected only the bridge contracts or touched other parts of The Sandbox's smart contract infrastructure. Investors and developers will be watching for an official post-mortem from the team.

The incident adds to a long list of bridge-related security failures across the crypto industry. Cross-chain infrastructure has been repeatedly targeted because it often concentrates large amounts of value in a small number of smart contracts. Past bridge exploits across the sector have resulted in losses ranging from millions to over a billion dollars in extreme cases, underscoring the systemic risk this category of infrastructure carries.

For The Sandbox specifically, the exploit raises questions about token supply integrity. If billions of unbacked SAND tokens were indeed created, the project may need to burn or otherwise reconcile that supply once bridging resumes. Until then, holders on Base and BNB Chain are unable to move SAND to or from those networks, limiting liquidity and trading flexibility for affected users.

Market Impact

A confirmed unbacked token mint could weigh on SAND's market perception, since it raises doubts about the true circulating supply until the project clarifies the scope of the exploit. Traders often react cautiously to bridge incidents, since resolution timelines and remediation plans vary widely across projects.

More broadly, the episode reinforces ongoing scrutiny of cross-chain bridge security within the web3 gaming and broader crypto sector. Projects and investors alike may push for stronger audits and monitoring of bridge contracts following this and similar past incidents.

The Sandbox has yet to detail the full scope of the exploit or when bridging will resume. Further updates from the project are expected to clarify the token supply impact and any remediation steps.

Frequently Asked Questions

What happened to The Sandbox's bridging service?

The Sandbox paused SAND token bridging between Base and BNB Chain after identifying an exploit affecting its cross-chain infrastructure.

How many unbacked SAND tokens were reportedly minted?

CryptoBriefing reported the exploit allowed an attacker to mint billions of unbacked SAND tokens, though the exact figure has not been officially confirmed.

Why do crypto bridges get targeted by exploits?

Bridges concentrate value in smart contracts that mint or release tokens across chains, making flawed accounting logic a common attack target.

Is SAND still tradable during the pause?

The available reporting indicates bridging between Base and BNB Chain is halted, but it does not specify whether trading on exchanges is affected.