Hack history / 2026 / Hack or exploit
The Sandbox
Hack or exploit on Aug 22, 2026 · Improper Access Control
SOURCES DISAGREE ON DATE OR LOSS · 3 SOURCES
Lost
$675K
sources: $517K to $675K
Returned
none listed
as the sources state it
Rank
#1,055
among thefts by dollars lost
What happened
The Sandbox’s SAND cross-chain bridge was exploited after an attacker abused approveAndCall on the Base SAND OFT contract to hijack LayerZero delegate permissions. The attacker changed trusted cross-chain configuration, minted unbacked SAND on Base and BNB Chain, and used the compromised bridge path to extract approximately 14.75M backed SAND from the Ethereum OFT adapter. The Sandbox disabled bridging on Base and BNB Chain and stated that SAND on Ethereum and Polygon was unaffected at the token-contract level
Details
- Date
- Aug 22, 2026
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Base, BNB Chain, Ethereum
Reported by
Related incidents
The Sandbox 2023 · Phishing · undisclosed
Sandbox LAND 2022 · Hack or exploit · undisclosed
JungleFreaks and Sandbox NFTs are stolen from a collector 2021 · Hack or exploit · $41K
SUPERFORTUNE AI 2026 · Hack or exploit · $15.2M
Crypto DAO 2026 · Hack or exploit · $8.2M
Sandbox LAND 2022 · Hack or exploit · undisclosed
JungleFreaks and Sandbox NFTs are stolen from a collector 2021 · Hack or exploit · $41K
SUPERFORTUNE AI 2026 · Hack or exploit · $15.2M
Crypto DAO 2026 · Hack or exploit · $8.2M
Cite this page
SwanBluechip, "The Sandbox hack, Aug 22, 2026: $675K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht4eab1560d4/ (data as of 2026-10-31).