The Sandbox faces security breach as 500M SAND minted on Base network

Someone just printed themselves a sixth of The Sandbox’s entire token supply. Over 500 million SAND tokens have been minted through what appears to be an infinite mint vulnerability in the project’s Base network deployment, and the exploit is reportedly still active.

With SAND’s total supply capped at 3 billion tokens, the unauthorized creation of 500 million new ones represents a roughly 17% dilution of the entire supply in a single stroke.

What happened

The exploit targets a smart contract flaw in The Sandbox’s SAND token deployment specifically on the Base network. Attackers gained unauthorized minting permissions that bypassed the protocol’s established supply controls, effectively giving themselves the ability to create tokens out of thin air.

On-chain data suggests the exploit remains active, meaning additional tokens could still be minted as the situation develops. The identity of the attackers, the precise technical flaw they exploited, and the final destination of the minted tokens all remain unknown.

The Sandbox has not released any public statement addressing the incident.

A Base-specific problem, but a market-wide concern

One important nuance: the exploit appears confined to the Base-network version of SAND rather than affecting the token across all chains. The Sandbox’s core operations and the original Ethereum-based SAND token do not appear to be directly compromised.

SAND’s tokenomics were designed with a hard cap of 3 billion tokens and an emission schedule that vests supply over time. The unauthorized minting effectively undermines that entire framework.

Market observers on platforms including KuCoin and Binance Square have flagged the potential for significant downward price pressure as the newly minted tokens could flood trading venues. No major exchanges have publicly announced trading suspensions or delisting actions so far, though monitoring for such moves is ongoing.

What to watch from here

The most immediate variable is whether The Sandbox can shut down the exploit. With on-chain data suggesting the vulnerability remains active, every hour that passes without a fix is another hour during which additional tokens could be minted.

Traders holding SAND should be watching for any official communication from The Sandbox team, including potential contract pauses, snapshot announcements for affected holders, or coordination with exchanges.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.