The Sandbox Begins SAND Compensation
The Sandbox has officially opened its long-awaited compensation process for SAND holders affected by the August 22 bridge exploit. For eligible users, the message is straightforward: if they legitimately held bridged SAND on Base or BNB Smart Chain immediately before the attack, they can claim full 1:1 compensation in SAND on Ethereum.
The claim window opened on September 8, 2026, and runs until September 22 at 4 PM UTC. The process has also been designed to be as simple as possible, requiring just one transaction from an eligible wallet.
For anyone involved, however, there is one important rule: stick to the official process and be extremely cautious of scams.
Who Is Eligible for Compensation?
Eligibility is not based on what happened after the exploit. Instead, The Sandbox is using a fixed on-chain snapshot taken immediately before the attack.
That means users do not lose their entitlement if they:
Traded their SAND after the snapshot
Moved their tokens to another wallet
Changed their balance after the incident
Simply left their SAND untouched
The relevant balances were recorded on-chain before the vulnerability was exploited.
For Base, the snapshot was taken at block 50,283,188, timestamped August 21, 2026, at 23:42:03 UTC. On BNB Smart Chain, the snapshot corresponds to block 117,322,025, timestamped August 21 at 11:42:44 UTC.
Because the information comes directly from public blockchain records, eligible holders don't need to submit documentation or prove their ownership through a traditional application.
The model is essentially restitution: if a wallet legitimately held affected SAND before the incident, The Sandbox intends to return the equivalent amount in full.
How Does the SAND Claim Work?
The claim process depends on where the affected SAND was held.
Users who controlled their own wallets on Base or BNB Smart Chain can use the official claim page at claim.sandbox.game during the September 8–22 claim period.
The process requires a single transaction from the wallet that held the SAND at the time of the snapshot. There are no token approvals, additional signatures, or transfers of funds involved.
That simplicity is important in the blockchain gaming world, where compensation campaigns can become attractive targets for scammers.
The Sandbox has made the mechanics deliberately clear. A legitimate claim should not require users to:
Approve a token contract
Sign an off-chain message
Send SAND or other tokens
Transfer funds to another wallet
Provide private keys or seed phrases
In other words, if a supposed compensation page asks for anything beyond the official one-transaction process, users should stop immediately.
What About SAND Held on Exchanges?
Not everyone affected by the exploit needs to interact with the claim page.
If the SAND was held through a centralized exchange at the time of the snapshot, The Sandbox is working directly with those exchanges to process compensation.
That means affected exchange users should generally take no action themselves.
Instead, the exchange will handle the compensation process on behalf of its customers.
This creates two distinct paths:
Self-custody wallet: Use the official claim process.
Centralized exchange: Wait for the exchange to handle compensation directly.
For users unsure which category applies to them, checking the wallet or exchange where the SAND was held before the snapshot is the logical first step.
Why the August Bridge Exploit Matters
The compensation program comes after a serious vulnerability was discovered in The Sandbox's bridged SAND infrastructure.
The exploit began on August 21, 2026, at approximately 23:41 UTC. The bridge was subsequently shut down at the contract level across the affected networks on August 22 at 05:26 UTC.
The vulnerability involved the way SAND was deployed on Base and BNB Smart Chain. The token contract also served as part of the LayerZero bridge integration, and a configuration function allowed an attacker to register themselves as the sole verifier for incoming bridge messages.
That opened the door for the attacker to mint SAND without corresponding deposits on Ethereum.
Forensic analysis estimated that 14,742,341.84 SAND was drained from the Ethereum vault backing the bridge. That's roughly 0.5% of the token's fixed 3 billion maximum supply, with the drained amount estimated at around $697,000 at the time.
The wider economic impact was estimated at approximately $1.5 million.
Importantly, the incident did not affect SAND on Ethereum or Polygon.
The SAND Supply Will Not Increase
One of the most important details for the broader SAND ecosystem is how The Sandbox is funding the restitution.
The compensation will come directly from The Sandbox treasury. The studio is not minting new SAND to compensate affected users.
Ethereum's SAND supply therefore remains unchanged at its fixed 3 billion tokens.
That's an important distinction for anyone following blockchain gaming tokenomics. A compensation program could theoretically create additional supply if new tokens were minted, potentially introducing another economic concern. Here, The Sandbox says the restitution will instead be funded from existing treasury resources.
The compromised Base and BNB Smart Chain contracts have also been permanently retired.
They will not simply be reopened because of the underlying security configuration. Any future bridging to those networks will instead require newly deployed contracts at new addresses, with details announced through official channels.
Beware of SAND Compensation Scams
Perhaps the biggest practical warning for SAND holders is to watch out for impersonators.
Crypto exploits frequently produce a second wave of attacks because scammers know users are actively searching for compensation information. Fake claim websites, phishing links and fraudulent direct messages can easily appear convincing.
The Sandbox says its team will never initiate a direct message first.
Users should verify information through the project's verified X account and the official claim website before interacting with anything related to compensation.
A useful rule is simple: never provide a private key or seed phrase, and never send funds to claim compensation.
The legitimate process requires one transaction from the eligible wallet and does not require token approvals or off-chain signatures.
What If the Claim Deadline Is Missed?
The official claim window closes on September 22, 2026, at 4 PM UTC.
However, missing that deadline does not mean the underlying entitlement disappears immediately.
The Sandbox has said that holders who miss the deadline can contact claim@sandbox.game, with late claims considered on a case-by-case basis through the end of October.
Questions concerning eligibility or the mechanics of the process can also be directed to contact@sandbox.game.
For anyone active in blockchain games, the situation is a useful reminder that bridges remain one of the most sensitive parts of the Web3 infrastructure stack. They connect assets between networks, but their smart-contract configurations can also introduce significant security risks.
What SAND Holders Should Do Now
For eligible holders, the immediate checklist is fairly short:
Check whether the affected SAND was held on Base or BNB Smart Chain before the snapshot.
If it was in a self-custody wallet, use the official claim process.
If it was held through an exchange, wait for the exchange's compensation process.
Never approve an unfamiliar token contract.
Never sign an unexpected message.
Never send funds to receive compensation.
Verify announcements through official Sandbox channels.
If the deadline is missed, contact The Sandbox before the end of October.
The August exploit was undoubtedly a setback for The Sandbox ecosystem, but the compensation program gives affected SAND holders a clear path toward restitution. Just as importantly, the decision to fund compensation from the treasury rather than minting additional tokens keeps the total SAND supply intact.
For the wider blockchain gaming community, the incident is another reminder that ownership and interoperability come with their own risks. As Web3 games continue expanding across multiple networks, bridge security will remain just as important as gameplay, economies and digital ownership.
Comments