- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
Sandbox OFT exploit on EVM, 2026-08-22. DeFiHackLabs summary: SandboxOFT - LayerZero delegate hijack via approveAndCall. Loss as recorded by DeFiHackLabs: 10,000,000 SAND minted unbacked (~$517,170 face value, one of 400+ repeated txs in an ongoing campaign). Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0x638Ccb18370eE228378a565c1d4D0F9620d7F296 — labeled "attacker" (EVM) Sources:…
Other addresses in this report: 0x638ccb18370ee228378a565c1d4d0f9620d7f296