CYRVOLA / ENUTC EVIDENCE LEDGER한국어
CYRVOLA

Markets, signals, verified.

News & Research · Aug 22, 2026, 9:46 AM UTC

The SAND bridge exploit’s biggest number is not the loss estimate

A pixel-art and riso-print illustration of a cracked bridge-control key between two chain islands, with an enormous stack of token discs on one side and a much smaller pouch on the other.

CryptoRank reports nearly $49 billion in face-value unbacked minting, but about $675,000 in estimated extracted SAND. Keeping those measures separate is essential.

STORY ID / cyrvola-20260822-newsresearch-sand-bridge-exploit-supply-gapUTC / 2026-08-22T09:46:10Z

Risk boundary: An exploit report, a face-value mint estimate, and an official wallet-integration announcement are not investment advice. Bridging and liquidity conditions can change quickly; verify current protocol and exchange notices before transferring or trading assets.

What the report says

CryptoRank reports that attackers hijacked LayerZero delegate permissions through approveAndCall and minted unbacked SAND through the cross-chain OFT on Base and BNB Smart Chain. The report says The Sandbox contained the issue, stopped bridging on those two chains, and said Ethereum and Polygon were not affected.

The report also says The Sandbox planned a liquidity-provider snapshot and compensation for eligible LPs. It says Bithumb suspended SAND deposits and withdrawals and Upbit issued an investor warning; these are reported precautions, not proof of a particular price response.

Why the two dollar figures must stay separate

CryptoRank distinguishes nearly $49 billion in face-value newly minted SAND from an estimated roughly $675,000 in SAND extracted, plus about 79.74 ETH. The first figure applies a nominal token value to unbacked supply; it should not be read as cash removed, realized loss, or market value successfully captured by attackers.

That distinction changes how the incident is understood. A permission failure can create an extreme accounting quantity while liquidity, execution, containment, and recoverability constrain what can actually be extracted. The selected bundle does not provide a complete loss assessment, so Cyrvola does not convert either reported estimate into a final damage figure.

What remains unverified

The second source is a sponsored announcement commissioned by TRON. It says Bitcoin.com Wallet added native TRON support for TRX and USDT-TRC20 on iOS, Android, and web without a separate wallet or bridging. Cyrvola uses that first-party product claim only to clarify that native network support and a cross-chain bridge are different operational paths; it does not corroborate the SAND incident.

No approved market dataset in this bundle supplies three timestamped SAND price and volume readings around the event, and no verified social permalink is included. Market reaction is unavailable, causality is unknown, and readers should watch current bridge status, LP-compensation details, and exchange notices rather than infer a trading conclusion from the mint headline.

Source ledger

Verified source material

News lookup: current-results-reviewed · 2026-08-22T09:46:10Z