Leaderboard
762All-time rank
S

SandboxOFT

Aug 22, 2026

$517K
Lost
$517K
Recovered
$0
Net loss
$517K
Unrecovered0% recovered

LayerZero delegate hijack via approveAndCall.

How the exploit worked

View reproducible PoC

LayerZero delegate hijack via approveAndCall.

Lost: 10,000,000 SAND minted unbacked (~$517,170 face value, one of 400+ repeated txs in an ongoing campaign)

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Protocol Logic
Technique
LayerZero delegate hijack via approveAndCall
Attribution
Unknown
Chains

Event timeline

  1. Aug 22, 2026
    Exploit executed — $517K drained via layerzero delegate hijack via approveandcall
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Sources

Data credits

Related incidents