ChainCatcher report: The Sandbox has released a post-incident analysis report regarding the vulnerability incident on August 22. The report reveals that the attacker exploited vulnerabilities in cross-chain configuration contracts on Base and the BNB Smart Chain (BSC), stealing 14,742,341.84 SAND tokens from the Ethereum vault—approximately 0.5% of the maximum supply—with an estimated economic impact of $1.4968 million, of which approximately $987,000 was actually retained by the attacker. The Ethereum mainnet and Polygon network were unaffected. Until further notice, do not purchase or send SAND on Base or BNB Smart Chain. The contracts deployed on Base and BNB Smart Chain have been permanently disabled and will not be reactivated. The Sandbox has reported the attacker’s wallet addresses to blockchain analysis firms TRM Labs and Chainalysis and has directly communicated with relevant exchanges. The Sandbox has also announced a compensation plan: wallets that legally held cross-chain SAND on Base or BSC prior to the incident will be compensated at a 1:1 ratio with Ethereum-based SAND. Compensation funds will be drawn from The Sandbox treasury without minting new tokens; the claims process will open within the next two weeks and remain open for an additional two weeks.
The Sandbox to Compensate Pre-Hack Holders 1:1 from Treasury
ChaincatcherShare
Summary
The Sandbox has published an on-chain report detailing the August 22 exploit, in which attackers exploited a cross-chain vulnerability on Base and BSC, stealing 14,742,341.84 SAND. The hack affected 0.5% of the maximum supply, valued at approximately $1.5 million. Ethereum and Polygon were unaffected. The compromised contracts have been permanently disabled. The Sandbox has shared the attacker’s wallet addresses with TRM Labs and Chainalysis and is coordinating with exchanges. A compensation plan will reimburse pre-hack holders on a 1:1 basis from the treasury, with claims opening in two weeks.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.