Unbacked SAND Tokens Were Minted on Base and BSC, and Korean Exchanges Froze the Wrong Chain
The Sandbox confirmed a bridge exploit that created unbacked SAND tokens on Base and BNB Smart Chain, and the fallout exposed something more alarming than the hack itself: the exchanges that froze trading got it wrong.
Upbit and Bithumb, two of South Korea's largest exchanges, moved quickly under the country's user-protection law to freeze SAND deposits and withdrawals. The problem? Upbit halted transfers on Ethereum specifically, the one chain The Sandbox explicitly said was not affected by the exploit.
What Actually Happened
The Sandbox says it identified and contained the bridge vulnerability before it could spiral into a full-scale crisis. The exploit allowed unbacked SAND to be minted on Base and BSC, meaning tokens were created without the collateral that should back them. If those tokens had flooded the open market, every legitimate SAND holder would have taken the hit through instant, invisible dilution.
The studio says the situation is now contained. But "contained" is doing a lot of heavy lifting in that sentence. No independent audit has confirmed the scope of how many unbacked tokens were actually minted or whether any reached circulating supply before the exploit was shut down.
The Korean Exchange Problem
The regulatory response in South Korea was fast but imprecise. Upbit freezing Ethereum-based SAND transfers, when Ethereum was the untouched chain, created unnecessary panic and locked up funds for users who had zero exposure to the actual exploit.
This is a recurring problem in crypto crises: exchanges act fast to protect users, but without real-time communication from the protocol, they often protect users from the wrong risk while leaving them exposed to the actual one.
Bithumb's response has not been fully detailed, but the broader pattern signals that South Korean regulators and exchanges are becoming more aggressive post-exploit, even if the execution needs refinement.
What Traders Should Watch Right Now
Three things matter here in the next 48 to 72 hours.
First, watch for an independent post-mortem from The Sandbox. Until a third party confirms the exploit scope, the "contained" claim is unverified.
Second, monitor SAND liquidity on Base and BSC specifically. If unbacked tokens entered circulation, selling pressure on those chains will show up before it hits price feeds on centralized exchanges.
Third, watch whether Upbit reopens Ethereum SAND transfers quickly. A prolonged freeze on an unaffected chain signals that Korean regulators are waiting for clarity The Sandbox has not yet provided publicly.
Bridge exploits with minted unbacked supply are among the most dangerous events in crypto. The Sandbox may have moved fast enough. The evidence will be in the on-chain data, not the press release.