Sandbox halts Base and BNB chain bridging after exploit

CoinDesk reports Sandbox has stopped bridging on Base and BNB Chain following an exploit; here is what is actually known so far.

CoinDesk reported on 2026-08-22 that Web3 gaming network Sandbox has stopped bridging on Base and BNB Chain following an exploit. That headline is the only detail currently available. No figures, addresses, dates beyond the publication date, or names have been verified, so none should be assumed.

What is and isn't known

Halting bridging is a common containment step when a project suspects a compromise, since it can stop further cross-chain movement of funds while the situation is assessed. CoinDesk's report does not specify what triggered the exploit, how much was affected, or whether any funds were recovered.

Until Sandbox or CoinDesk publishes further detail, any figure, address list, or attribution circulating about this incident should be treated as unverified.

What it means for this work

For compliance analysts and investigators, a bridge suspension is often the first public signal of an incident, well before technical detail emerges. Treat this stage as a flag to watch, not a case file to build on. Premature conclusions about wallets, amounts, or responsible parties based on a headline alone can create real liability.

What you can do now

• Watch for Sandbox's own statement and any follow-up reporting from CoinDesk before drawing conclusions.
• Hold off on flagging specific addresses or amounts until they appear in a named source.
• Note the bridging halt as a timestamped event if you are building a timeline, but label it clearly as unconfirmed pending detail.
• Check whether exchanges or other bridges have issued related advisories, since these often follow shortly after a reported exploit.

If further reporting names specific addresses, chains, or amounts tied to this incident, that is the point at which tracing tools become useful, not before.

WalletDNA can be used to review wallet activity across chains once concrete addresses tied to this incident are publicly reported.