The Sandbox disabled bridging on Base and BNB Chain yesterday after a security incident targeting its SAND token on both networks. The company immediately warned users not to trade SAND on the affected chains and shut down bridge contracts to isolate compromised tokens.
The exploit hit two of the metaverse platform’s newer expansion chains. Base, Coinbase’s Ethereum layer-two, and BNB Chain both saw unauthorized SAND tokens enter circulation, though the company said the total impact was under 0.01% of the token’s total supply.
Bridge Exploits Remain a Persistent Weakness
Cross-chain bridge attacks have drained billions from the industry since 2021, and the pattern is consistent: attackers find a vulnerability in the message-passing or token-wrapping logic, mint synthetic tokens on a destination chain without locking equivalent collateral on the source chain, then dump them. Ronin, Wormhole, Poly Network, Harmony’s Horizon, the list is long.
What’s notable here isn’t the vector. It’s the speed of containment. The Sandbox caught the issue fast enough that the circulating supply barely moved. For a token with a market cap that’s hovered in the hundreds of millions, 0.01% translates to a low six-figure dollar impact at most. That’s a rounding error compared to the nine-figure bridge hacks that defined 2022 and 2023.
Base and BNB Chain Bridges Under Scrutiny
The incident raises questions about how The Sandbox deployed bridging infrastructure on Base and BNB Chain in the first place. Both networks are widely used, but bridge security standards remain uneven. Did the platform use a third-party bridge provider, or did it roll its own contracts? The company hasn’t disclosed technical specifics, and that silence matters when users are told to sit tight and avoid trading.
The Sandbox’s warning to avoid trading SAND on the affected chains is unusual in its bluntness. Typically, projects try to coordinate with exchanges to halt deposits and withdrawals. Here, the message is simpler: those tokens are tainted, and anyone holding them on Base or BNB Chain is stuck until the bridge reopens, if it reopens.
Bridge exploits don’t always end with a neat rollback. Sometimes the compromised tokens circulate for weeks, washing through DEXs and centralized exchanges before anyone realizes the supply is inflated. The Sandbox appears to have caught this one early, but the damage to user confidence in cross-chain SAND is already done. Bridging back online will require a postmortem, an audit, and probably a redeployment of the contracts. Until then, SAND on Base and BNB Chain is effectively frozen.
