The Sandbox plans to compensate at a 1:1 ratio, with a bridge vulnerability resulting in approximately $700,000 worth of SAND being stolen

The blockchain gaming platform The Sandbox stated that it will compensate users who held bridged SAND on Base or BNB Smart Chain at a 1:1 ratio before the bridge vulnerability attack, with compensation provided in Ethereum-based SAND from the project treasury, and there will be no token issuance. This attack resulted in the theft of approximately 14.744 million SAND from the Ethereum treasury, valued at about $700,000.

The application process is expected to open within two weeks and will last for two weeks; over 72% of the balances held by two centralized exchanges that meet the compensation criteria will be directly compensated to affected customers. The Sandbox indicated that the attacker exploited a configuration vulnerability in the SAND contracts on Base and BNB Chain, becoming the sole validator of bridge messages and minting unbacked tokens. Additionally, over 339 trillion unbacked SAND was minted on the two networks but has been isolated and cannot be cross-chain or exchanged; SAND on Ethereum and Polygon remains unaffected, and the compromised bridge contracts will be permanently disabled.