The Sandbox Contains Bridge Exploit After Unbacked SAND Minted on Base and BSC

The Sandbox said it has contained a vulnerability in the SAND cross-chain bridge on Base and BNB Smart Chain after an attacker minted unbacked tokens on both networks.

The project put the impact at under 0.01% of the total SAND supply. It said that tokens on Ethereum (ETH) and Polygon (POL) are unaffected and that no user wallets were compromised.

Sandbox Becomes Latest Project Reportedly Hit by an Exploit

Blockaid flagged the incident on Saturday. The firm said attackers hijacked LayerZero delegate permissions through the approveAndCall function.

"~$49B face-value SAND minted so far across ~400+ txs," Blockaid said.

Follow us on X to get the latest news as it happens

The team said that it has disabled bridging to and from Base and BSC, cutting off any route to move or redeem the minted supply. It said the SAND locked on Ethereum, which backs all bridged tokens, remains intact.

… Continue reading the full article at the original source below.