What is The Sandbox (SAND)?

The Sandbox (SAND) is a decentralized virtual-world gaming ecosystem and ERC-20 utility and governance token originally developed by Pixowl, which was acquired by Animoca Brands. The platform enables creators to build, own, and monetize virtual experiences and blockchain-based digital assets, including voxel-based assets and virtual LAND represented as NFTs. SAND functions as the ecosystem's primary utility token and medium of exchange, supporting purchases of LAND, ASSETs, avatars, equipment, and other NFTs, as well as creator payments and participation in the platform economy. SAND is deployed on both Ethereum and Polygon, with The Sandbox providing a bridge between the two networks and using Polygon for lower-cost transactions and staking activities. SAND also functions as a governance token through The Sandbox DAO, while holders can participate in supported staking programs subject to applicable restrictions and program availability. (Source: The Sandbox Documentation | Sandbox Game) 

Risk Associated to the Digital Asset 

The Sandbox (SAND) presents a multifaceted risk profile that investors and market participants must navigate:

• Market Volatility Risk: SAND has experienced substantial price depreciation and remains highly sensitive to changes in speculative demand, cryptocurrency market cycles, and sentiment toward blockchain gaming and metaverse applications. Its historical all-time high was approximately $8.40 on November 24, 2021, while the token has subsequently traded more than 99% below that peak. (Source: CoinGecko | CoinGlass) 

• Regulatory & Adoption Risk: The Sandbox's long-term performance depends on sustained user, creator, and developer adoption of blockchain-based gaming and virtual-world applications. Changes in regulations affecting digital assets, NFTs, virtual economies, consumer protection, taxation, or KYC requirements could increase compliance costs or restrict certain platform activities. The Sandbox itself currently applies KYC requirements to certain reward and staking activities. (Source: The Sandbox Documentation Reward | Staking) 

• Cybersecurity & Custody Risk: SAND operates across Ethereum and Polygon, with The Sandbox providing a bridge between the two networks. This multi-chain architecture introduces additional smart-contract, bridge, and wallet-security dependencies compared with a single-chain deployment. Users remain exposed to risks including vulnerabilities in application contracts, bridge infrastructure, phishing, compromised wallets, and unauthorized transaction approvals. (Source: The Sandbox Documentation) 

• Concentration & Governance Risk: SAND's original token distribution included substantial allocations to the company reserve, founders and team, foundation, private investors, and advisors. Current tokenomics data indicates that these categories represented a significant portion of the original 3 billion SAND supply, creating potential concentration risk even though the token is now governed through The Sandbox DAO. (Source: Tokenomics | The Sandbox Documentation) Governance participation may also be influenced by the distribution of voting power among larger token holders and entities with substantial treasury or ecosystem allocations. 

Trading History of Digital Asset

• Market Capitalization & Ranking: Driven by the broader contraction of metaverse-related asset premiums, SAND establishes itself within a mid-tier market capitalization band of approximately $110 million(Source: CoinGecko)

• Daily Volume & Liquidity Depth: The token maintains continuous 24-hour global trading volumes around $10 million iquidity depth is preserved through widespread structural listings across premier digital asset exchanges, including Binance, Upbit, BitDelta, ensuring highly active order books and tight bid-ask spreads for premier pairs like SAND/USDT and SAND/USDC. (Source: CoinGecko)

• Institutional Integration: While SAND lacks major traditional exchange-traded products (ETPs) or institutional futures markets compared to sovereign layer-1 assets, its underlying ecosystem has captured massive venture capital funding and high-profile institutional brand partnerships, including SoftBank's Vision Fund 2 and intellectual property collaborations with multi-national corporations. (Source: Binance Academy)

Incidents of Manipulation or Security Failures

Security Model: SAND is an ERC-20 token rather than a sovereign Layer-1 asset, with its primary token contract deployed on Ethereum and SAND also available on Polygon for lower-cost transactions within The Sandbox ecosystem. Consequently, the security of SAND's base-layer transactions depends primarily on the underlying Ethereum and Polygon networks rather than an independent SAND consensus mechanism. (Source: The Sandbox Documentation – SAND Documentation | Binance Academy – What Is The Sandbox (SAND)?) 

Market Dislocation & Price Risk: No verified source reviewed identifies a confirmed manipulation or systemic exploit of the SAND token contract itself. However, SAND remains exposed to normal cryptocurrency market risks, including speculative trading, concentrated liquidity, and abrupt price and volume movements. Therefore, it is more appropriate to characterize this as market and liquidity risk rather than a documented SAND manipulation incident. (Source: CoinGecko | CertiK) 

Documented Security Findings: The Sandbox's smart-contract ecosystem has undergone multiple security assessments, including reviews by CertiK, Solidified, OpenZeppelin, and DeHacker. A July 2024 DeHacker review of the LandBaseToken contract identified centralization risks associated with privileged roles, including _admin, minter, and superOperator, which possessed extensive authority over critical contract functions. The review also identified a potential denial-of-service vector in the LAND minting process, where strategically minting smaller LAND units could interfere with the minting of larger LAND quads. These findings represent identified contract-design risks rather than evidence that SAND itself was successfully exploited. (Source: DeHacker – The Sandbox Security Audit Review) 

Historical Security Incident: The Sandbox has also experienced security issues involving contracts other than SAND itself. In January 2021, a vulnerability was discovered in the ASSET smart contract that could allow token duplication. The Sandbox stated that SAND and LAND were not affected, that the vulnerability had not been exploited, and that the affected ASSET contracts were subsequently migrated and fixed following review by Solidified. (Source: The Sandbox – ASSET Smart-Contract Security Update)

Surveillance & Controls: The Sandbox has progressively incorporated external security reviews and governance mechanisms into its security framework. Its historical security work includes CertiK audits of SAND, LAND and related contracts, while later assessments have continued to identify and track privileged-role and contract-level risks. SAND itself also functions as a governance token, allowing holders to participate in DAO-based decisions concerning areas such as Foundation grants and feature prioritization. (Source: The Sandbox – CertiK Audit Review Announcement | The Sandbox Documentation – SAND Governance FAQ)

Token Ownership Concentration

SAND has a fixed maximum and total supply of 3 billion tokens. As of July 2026, approximately 2.667 billion SAND, or 88.91% of total supply, has been unlocked, leaving approximately 11.09% outside the circulating supply. Tokenomist indicates that the project's original vesting program ended in 2025, meaning SAND no longer has scheduled insider or investor unlock events under the original distribution framework. (Source: Tokenomist – The Sandbox Tokenomics & Vesting Schedule) 

Issuance & Vesting Schedules: The original 3 billion SAND allocation was distributed among Company Reserve (25.82%), Team (19%), Seed Sale (17.18%), Foundation (12%), Binance Launchpad (12%), Advisors (10%), and Strategic Sale (4%). CryptoRank and Tokenomist track these allocations and their historical unlocking schedules, with Tokenomist confirming that the vesting program was substantially completed by 2025. Consequently, future dilution from scheduled insider vesting is currently limited, although the remaining non-circulating supply should still be monitored for actual distribution and movement. (Source: CryptoRank – SAND Token Unlocks & Vesting | Tokenomist – SAND Tokenomics) 

Ownership Concentration: On-chain holder data continues to show substantial concentration among the largest SAND addresses. Etherscan currently records approximately 208,000 token holders, but address-level balances should not be interpreted directly as individual investor ownership because exchange wallets, custodial addresses, contracts, and treasury-related wallets can represent the holdings of many underlying users. Therefore, the concentration of the largest addresses should be assessed together with wallet attribution and entity classification, rather than treating the top-wallet percentage as pure whale ownership. (Source: Etherscan – SAND Token Holder Data) 

Security Audit

The Sandbox operates as an application-layer gaming metaverse powered by SAND (ERC-20 governance and utility token), LAND (ERC-721 real estate NFTs), and ASSETS (ERC-1155 user-generated content tokens). Because it is built as an application protocol rather than a sovereign Layer-1, its baseline technical security relies on smart contract audits, proxy admin governance, and the base-layer security of the Ethereum and Polygon networks.

• CertiK & Third-Party Smart Contract Audits: Core smart contracts—including the SAND ERC-20 token, LAND NFT registries, staking pools, and bridge handlers—have undergone formal code reviews and mathematical verification by CertiK and independent audit teams. Assessments verified ERC-20/721/1155 compliance, access control boundaries, and reentrancy protections. Real-time security profiling and smart contract risk scores are monitored via security platforms such as CertiK Skynet.

• Centralization Risks & Admin Multi-Sig Controls: Security evaluations consistently note privileged administrative permissions in contract deployment proxies. Functions governing minting logic, contract upgradability, fees, and operator roles are controlled by administrative multi-signature wallets. The Sandbox mitigates single-key failure risks using multi-sig thresholds, timelock contracts, and progressive governance migration to The Sandbox DAO.

• Layer-1/Layer-2 Cross-Chain Bridge Architecture: To facilitate low-cost asset transactions, The Sandbox integrates Polygon PoS alongside Ethereum. Cross-chain minting and bridging rely on audited state-sync bridge contracts (FxPortal / POS Bridge), requiring lock-and-mint proof verifications to ensure token supply equivalence across chains.

Application Security & User Asset Protections: Off-chain infrastructure—such as the VoxEdit marketplace, asset IPFS storage nodes, and account authentication systems—operates under standard Web3 security protocols, utilizing client-side cryptographic signing to ensure non-custodial ownership of user-generated metaverse assets.

Hata Custody Controls

For client assets held on Hata, Hata maintains its standard institutional custody and compliance framework: SOC 2 Type II certified custody, multi-signature (Multi-Sig) withdrawal authorisation, segregation of client assets, audited operational governance, continuous blockchain-analytics monitoring, and FATF Travel Rule compliance aligned with major regimes (EU/MiCA, Singapore, Japan and the UAE). These controls govern how Hata safeguards SAFE held with the exchange and are independent of the asset's own protocol-level security.

Sources

• Binance Academy

• Bybit

• OKX

• BISON App By Boerse Stuttgart

• DeHacker Security via Medium

• Etherscan

• Pluang

• Zipmex

• The Sandbox Whitepaper & Architecture

• The Sandbox Security Portal

• The Sandbox

• The Sandbox Documentation

• Sandbox Game

• CoinGecko

• Binance Academy

• DeHacke

• The Sandbox

• The Sandbox

• The Sandbox Documentation

• Tokenomist

• CryptoRank

• Tokenomist

• Etherscan