Leaderboard
714All-time rank
The Sandbox
Aug 22, 2026
$675K
Lost
$675K
Recovered
$0
Net loss
$675K
Unrecovered0% recovered
The Sandbox’s SAND cross-chain bridge was exploited after an attacker abused approveAndCall on the Base SAND OFT contract to hijack LayerZero delegate permissions. 75M backed SAND from the Ethereum OFT adapter.
The Sandbox disabled bridging on Base and BNB Chain and stated that SAND on Ethereum and Polygon was unaffected at the token-contract level.
- Target
- Bridge
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
BaseBSCEthereum
Event timeline
- Aug 22, 2026Exploit executed — $675K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%