The Sandbox SAND Token Exploit Mints Over 500M Tokens on Base

The Sandbox's SAND token suffered an exploit on the Base network, with on-chain data showing over 500 million SAND has been minted beyond the intended supply. The attacker is believed to have gained unauthorized minting privileges through a flaw in the smart contract underpinning the Base deployment. As of the latest update, the abnormal minting appears to be ongoing, and the project has not yet issued an official response. The incident has raised concerns about potential dilution of the token's supply, given that the original supply cap was set at 3 billion SAND.

According to on-chain data, the affected contract is the Base version of SAND that uses the LayerZero OFT cross-chain standard at address 0xac531Eb26Ca1d21b85126De8FB87E80E09002DcF. The attacker's address, 0x67624bfadee937c9281b4f98ce18af1bee01257e, has been continuously generating new tokens. While the Ethereum mainnet SAND has a fixed maximum supply of 3 billion tokens, the Base cross-chain token operates under a separate contract, so the uncontrolled minting has led to unlimited dilution of the total supply on that network.

South Korea's largest cryptocurrency exchange, Upbit, issued a warning on August 22 after detecting potential security issues with SAND, advising users to be cautious due to the likelihood of increased price volatility. Meanwhile, another major Korean exchange, Bithumb, activated preventive measures by temporarily suspending SAND deposits and withdrawals. Both exchanges have prioritized protecting user assets in response to the confirmed abnormal minting activity.

The price of SAND dropped sharply by 5% to 10% shortly after the market learned of the exploit, accompanied by a significant surge in trading volume. The market reaction reflects investors' concerns about the impact of the unauthorized token issuance on the token's value. The continued minting has made it difficult for the market to gauge the total supply, adding to the uncertainty surrounding the asset.

The Sandbox is a subsidiary of Animoca Brands, a major blockchain gaming company, and previously raised $93 million in a funding round in 2021. However, the company has faced challenges as demand for metaverse and GameFi projects has declined. In August 2025, The Sandbox reduced its workforce by more than half and removed two co-founders from day-to-day management as part of a broader restructuring driven by cooling metaverse enthusiasm.

The vulnerability appears to have allowed attackers to gain access to mint SAND at will, as security researchers and on-chain analysts have pointed out. The exact cause of the vulnerability, how the minting permissions were compromised, and the destination of the newly minted tokens remain under investigation. Until the team provides a formal post-mortem, the scope of the impact is still being assessed by exchanges and token holders.

The Sandbox exploits highlight the risks associated with cross-chain token deployments, where a separate contract's security failure can break the supply guarantees of the original asset. The official team has yet to release a post-mortem, but the on-chain evidence is clear: the attacker's address has minted over 500 million tokens, and the remediation will likely involve revoking compromised permissions and assessing whether the affected Base contract needs to be redeployed. The live spot price of SAND has moved 16.5% in the last 24 hours, reflecting the market's reaction to the ongoing situation.