A bridge configuration flaw on Base and BNB Smart Chain allowed attackers to hijack LayerZero delegate permissions, mint trillions of phantom SAND tokens, and drain approximately $675,000 from the Ethereum vault.
The Sandbox contained a vulnerability in its SAND cross-chain bridge on Base and BNB Smart Chain after an attacker minted approximately 500 million unbacked tokens. The project stated the impact was under $1 million, though the full extent of damage remains unclear.
The BY token project suffered an $88,400 loss through a Binance Smart Chain exploit targeting vulnerable contract logic, occurring during what security firm CertiK identified as the worst month for DeFi exploits in four years with attacks on 27 out of 30 days in April 2026.
