BlockBeats News, August 27, The Sandbox released a post-mortem analysis report of the August 22 vulnerability incident. The report revealed that the attacker exploited a vulnerability in a cross-chain configuration contract on the Base and Binance Smart Chain (BSC), stealing 14,742,341.84 SAND tokens from the Ethereum treasury, approximately 0.5% of the total supply. The estimated economic impact is around $1.4968 million, with approximately $0.987 million actually withheld by the attacker. The Ethereum mainnet and Polygon network were unaffected. Please refrain from buying or transferring SAND on Base or BSC until further notice. The contracts deployed on Base and BSC have been permanently disabled and will not be reinstated.

The Sandbox stated that the team has reported the attacker's wallet address to blockchain analytics firms TRM Labs and Chainalysis, and has engaged directly with relevant exchanges. The Sandbox also announced a compensation plan, offering to compensate wallets that held cross-chain SAND legally on Base or BSC before the incident with Ethereum SAND at a 1:1 ratio. The funds will come from The Sandbox treasury with no new tokens being minted. The claim process will open in the next two weeks and remain open for two weeks.