Billions of unsecured SAND tokens were minted in exploit, forcing the bridge to close

The Sandbox network has been hit by a vulnerability, billions of unsecured SAND tokens have been minted, and cross-chain bridges have been forced to suspend

The Sandbox of the Web3 game network has suspended users from transferring SAND tokens between its Base and BNB chains after detecting a security breach. According to CoinDesk, the vulnerability allowed attackers to mince billions of SAND tokens without real assets, raising market concerns about the authenticity of the token supply in circulation.

Sandbox is a Web3 game and virtual land platform where players can use SAND tokens to purchase, build and trade digital assets. The token is also a governance and utility tool in the platform market and metaverse experience. Because SAND exists on multiple blockchains, project parties rely on cross-chain bridge infrastructure that allows holders to transfer tokens between networks such as Ethereum, Base and BNB chains.

Cross-chain bridges have long been a weak link in cryptocurrency infrastructure. When contemporary coins are locked or destroyed on the source chain, the bridge contract must minte or release the same amount of coins on the target chain. If this accounting logic is tampered with, attackers can create tokens out of thin air without endorsing real assets. According to current reports, this seems to be the core mechanism of this incident.

Suspending the cross-chain bridge function is a standard emergency measure for project parties to respond to such vulnerabilities. Stopping transfers can prevent more unsecured tokens from flowing across chains or entering exchanges, avoiding being sold off before supply issues are resolved. At the same time, it also bought the team time to trace the attack path, assess the damage, and decide whether to fix the vulnerability or migrate the token.

As of the time of report, the details of the specific vulnerability, the scale of the financial impact and whether user funds have been exposed have not been fully disclosed. It is unclear whether the vulnerability only affects bridging contracts or touches other parts of the sandbox smart contract infrastructure. Investors and developers will pay close attention to the formal investigation report subsequently released by the project party.

This incident adds another record of security failures related to cross-chain bridges in the cryptocurrency industry. Cross-chain infrastructure is repeatedly attacked because it often concentrates a lot of value in a few smart contracts. In the past, cross-chain bridge vulnerabilities in the industry have caused tens of millions or even more than a billion dollars in losses, highlighting the systemic risks of such infrastructure.

Specific to the sandbox, this vulnerability raises questions about the integrity of the token supply. If billions of unsecured SAND tokens are indeed minted, the project party may need to destroy or otherwise adjust the supply after restoring the bridging function. Prior to this, holders on the Base and BNB chains were unable to transfer SAND into or out of these networks, limiting the liquidity and trading flexibility of affected users.

Market Impact

Once the existence of unsecured coin minting is confirmed, it may weaken market confidence in SAND, because the true circulation supply will be in doubt until the project party clarifies the scope of the loophole. Traders are generally cautious about cross-chain bridge incidents because resolution schedules and remedial measures vary widely from project to project.

More broadly, this incident once again strengthens the continued focus on cross-chain bridge security in Web3 games and the entire encryption world. After this and previous similar incidents, project parties and investors may push for stricter auditing and monitoring of bridge contracts.

The sandbox has not yet announced the full scope of the vulnerability or the specific time when the bridging feature will be restored. It is expected that the project party will subsequently issue updates explaining the impact of token supply and any remedial measures.

FAQs

What happened to the Sandboxed Cross-Chain Bridge Service?
The sandbox suspended the bridging function of SAND tokens between the Base chain and the BNB chain after discovering a vulnerability in cross-chain infrastructure.

How many unsecured SAND tokens were reportedly minted?
According to CryptoBriefing, the vulnerability allowed attackers to mince billions of unsecured SAND tokens, but the exact number has not been officially confirmed.

Why are cryptocurrency cross-chain bridges easy targets?
Cross-chain bridges concentrate value in smart contracts responsible for casting or releasing tokens across chains, and flawed accounting logic is a common target.

Can SAND tokens still be traded during the suspension?
Current reports show that the bridging function between the Base chain and the BNB chain has been suspended, but it has not been clearly stated whether transactions on the exchange have been affected.