0x638ccb18370ee228378a565c1d4d0f9620d7f296

Sandbox OFT exploit (2026-08-22) — attacker addresses

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-10-15
• Last updated: 2026-10-16

Sandbox OFT exploit on EVM, 2026-08-22. DeFiHackLabs summary: SandboxOFT - LayerZero delegate hijack via approveAndCall. Loss as recorded by DeFiHackLabs: 10,000,000 SAND minted unbacked (~$517,170 face value, one of 400+ repeated txs in an ongoing campaign). Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0x638Ccb18370eE228378a565c1d4D0F9620d7F296 — labeled "attacker" (EVM) Sources:…