The Sandbox拟按1:1赔付，桥接漏洞致约70万美元SAND被盗

The Sandbox announced that it will compensate users who held bridged SAND on Base or BNB Smart Chain before the bridge vulnerability attack on August 21 at a 1:1 ratio, using Ethereum-based SAND from the project treasury, with no new tokens issued.

The attack resulted in the theft of approximately 14.744 million SAND from the Ethereum treasury, valued at around $700,000. The claim process is expected to open within two weeks and last for two weeks; two centralized exchanges holding over 72% of the eligible balances will directly distribute compensation to affected customers.

The Sandbox stated that the attacker exploited a configuration vulnerability in SAND contracts on Base and BNB Chain to become the sole verifier of bridge messages and mint unbacked tokens. Over 339 trillion unbacked SAND were additionally minted across the two networks but have been isolated and cannot be bridged or redeemed; SAND on Ethereum and Polygon remains unaffected, and the compromised bridge contracts will be permanently decommissioned. (Cointelegraph)