Sandbox SAND Suspected of Infinite Minting Attack on Base Network
According to market news, The Sandbox's native token SAND on the Base network is suspected to have a serious security vulnerability, allowing attackers to gain minting permissions and arbitrarily increase the supply of SAND tokens.
On-chain data shows that over 500 million SAND tokens have been minted due to this vulnerability, and the attack is still ongoing, raising concerns that the large increase in supply may impact the price of SAND.
Currently, The Sandbox has not issued an official response to this incident, and the cause of the vulnerability, the source of the attacker's permissions, and the destination of the newly minted tokens are yet to be confirmed.
"Infinite minting vulnerabilities" typically arise from flaws in smart contract permission control or minting logic, allowing attackers to bypass restrictions and generate tokens in large quantities, leading to uncontrolled supply and market value dilution.
The related incident has triggered short-term price fluctuations and a surge in trading volume for SAND.
From a market mechanism perspective, infinite minting directly dilutes the value of existing holdings, with funds rapidly flowing out of SAND and related trading pairs; the incident is driven by a contract vulnerability, benefiting the attacker while putting pressure on holders and the project ecosystem.
Source: Public Information
ABAB AI Insight
The Sandbox, as a metaverse project, has its SAND token's contract on the Base network suspected of losing control over permissions, allowing attackers to directly gain minting rights and continuously increase supply, exposing risks in permission management during cross-chain deployment.
In terms of capital flow, the vulnerability allows new supply to enter the market at no cost, transferring resources from normal holders to the attack address, motivated by exploiting contract flaws to manipulate supply, with specific actions including the continuous minting of over 500 million tokens.
Similar cases have been seen historically where multiple projects faced infinite minting due to minting permission or logic flaws, leading to token value collapse; the current crypto market is at a stage of widespread multi-chain deployment and increasing pressure for contract security audits.
Essentially, this is a technical replacement: the normal supply mechanism is completely replaced by vulnerability minting, where after permission control fails, attackers can generate tokens infinitely and dilute all existing value.
ABAB News · Cognitive Law
- The day minting permissions go out of control, the supply cap becomes a mere decoration.
- 500 million costless tokens are enough to rewrite the entire market pricing.
- The biggest risk of cross-chain deployment often lies in permission design.