The Sandbox Offers 1:1 Refund After $700K Bridge Exploit

The Sandbox says it will directly reimburse eligible holders of bridged SAND after an Aug. 21 exploit that drained Ethereum-based tokens from a bridge vault. The incident, which targeted bridge infrastructure connected to Base and BNB Smart Chain, resulted in the loss of 14.744 SAND—valued at roughly $700,000 at the time—prompting the project to outline a structured repayment plan.

In a post-mortem shared Thursday, The Sandbox confirmed that compensation will be offered on a 1:1 basis for users who held bridged SAND on Base or BNB Smart Chain before the attack. The company says repayments will come from its treasury without minting new tokens, and that affected balances will be distributed through exchanges for a majority of eligible users.

Key takeaways

• The Sandbox will repay eligible holders of bridged SAND from Base and BNB Smart Chain at a 1:1 ratio using Ethereum-based SAND.
• The repayments are scheduled to begin within two weeks, with a claim window that extends for two additional weeks.
• More than 72% of eligible balances are held on centralized exchanges, which will reportedly distribute compensation directly to affected customers.
• According to The Sandbox, about 14.7 million SAND were drained—roughly 0.5% of the token’s 3 billion maximum supply—while the minted unbacked tokens were isolated.
• The compromised bridge contracts will be retired permanently, with future bridges expected to use newly deployed contracts.

Repayment plan for bridged SAND holders

The Sandbox’s reimbursement effort is aimed at users who held SAND that had been bridged onto Base or BNB Smart Chain prior to the Aug. 21 bridge exploit. The company states that claimants will receive an equal amount of Ethereum-based SAND (rather than a token of a different chain), using funds drawn from the project’s treasury. The project also emphasized that it will not mint new tokens to fund repayments.

Based on the company’s explanation, the claims process is expected to open within two weeks and then stay open for another two weeks. That gives eligible users a defined window to verify ownership and submit a claim where needed, while exchange customers may be handled automatically depending on the platform.

Where the losses came from, and what the attacker did

The Sandbox said the attacker exploited a configuration flaw in SAND’s bridge contracts on Base and BNB Chain. In the company’s account, the issue allowed the attacker to gain control over bridge message verification—ultimately enabling minting of unbacked tokens tied to the exploited bridge process.

The project confirmed that roughly 14.744 million SAND were drained from the Ethereum vault connected to the bridge. It also said that the compromised bridge activity led to the creation of more than 339 trillion unbacked SAND on the two targeted networks. However, The Sandbox added that those tokens have been isolated and cannot be bridged or redeemed.

Importantly for holders, The Sandbox stated that SAND on Ethereum and Polygon was not affected by the exploit. That means the core token supply on those networks did not face the same immediate impact as the bridged assets tied to Base and BNB Chain.

Isolation of unbacked tokens and retirement of compromised contracts

Beyond repayment, the company’s post-mortem focuses on containment and prevention. The Sandbox said that the bridge contracts used in the compromised configuration will be permanently retired. Any subsequent bridging between networks would be handled through newly deployed contracts intended to eliminate the exploited verification weakness.

The project’s description suggests that while the attacker succeeded in minting unbacked tokens during the bridge operation, The Sandbox designed—or was able to enforce—limits that prevented those tokens from moving into a redeemable or bridged state. For investors and traders, this distinction matters: it reduces the likelihood of a broader token supply shock across all supported networks, even if the event generated a large quantity of unbacked tokens during the attack.

Exchanges to distribute most compensation

The Sandbox also provided operational details about how compensation will reach users. According to the company, more than 72% of eligible balances are held on centralized exchanges. For those customers, the exchanges are expected to distribute compensation directly.

That approach may lower friction for most affected users by reducing the need for individual claims. Still, the project’s stated plan indicates that a claim process will exist—meaning users without exchange custody (or users not covered by exchange distributions) may need to apply during the opening window.

Token trading and market reaction

At the time of publication, SAND was trading around $0.04, according to CoinGecko, down about 10.4% over the previous seven days. The price drop reflects broader market conditions and how quickly bridge-security headlines can spill into sentiment, even when the project states that Ethereum and Polygon holdings were unaffected.

For market participants, The Sandbox’s commitment to 1:1 reimbursement and the claim timeline may help clarify risks for holders of bridged assets. However, the longer-term confidence impact will likely hinge on how smoothly the claims process runs, and whether monitoring of any remaining bridge-related surfaces finds no further issues.

Readers should watch the start of the claims window and follow how exchanges handle reimbursements for customers holding bridged SAND. Equally important will be The Sandbox’s progress deploying replacement bridge contracts and demonstrating that the retired configurations can’t be re-exploited through new bridge paths or integrations.