The Sandbox reported a bridge exploit that drained about $700,000 from an Ethereum vault linked to bridged SAND on Base and BNB Chain. The team said legitimate users will be repaid from treasury funds and that the compromised bridge contracts will be retired.
This type of incident happens when bridge message verification is too weak or too configurable. If a system can be tricked into accepting forged or unauthorized bridge messages, attackers can mint or drain assets without touching the main token contract.
The defense is strict message authentication, independently reviewed verifier logic, and a narrow bridge design that limits what any single contract can authorize. Compromised bridge components should be shut down quickly and replaced rather than patched in place.
Projects should also segregate bridged assets from core token supply and maintain a clear incident playbook for freezing, migrating, and compensating affected users. Bridges remain one of the highest-risk parts of crypto infrastructure.