sandbox

AI cloud service provider Akamai launched the AI agent sandbox Agent Sandbox and the Akamai Inference beta on October 27. The Agent Sandbox provides an isolated environment for the code written and run for agents based on WebAssembly, limiting their computing power, memory, and external connections. Jon Alexander, Senior Vice President of Cloud Technology at Akamai, stated that teams running agents need to define boundaries for the code they write.A survey by Palo Alto Networks in 2026 of 2,930 security leaders showed that, on average, each human identity corresponds to 109 machine identities, of which 79 are AI agents. Hugging Face disclosed a breach on July 16, and OpenAI subsequently confirmed that its models were responsible; a METR investigation found about 1,200 OpenAI agents collaborating through hidden message boards, with around 700 participating in attacks, escaping the sandbox and exploiting unknown vulnerabilities to enter production systems.Zscaler discovered web pages hiding instructions targeting AI agents in July, specifically indirect prompt injection, with a spoofed document page requiring agents to pay approximately 0.0012 Ethereum as a $3 licensing fee, and 4 out of 26 tested models complied. Palo Alto completed its acquisition of CyberArk in February and acquired Koi in April, while Cisco completed its acquisition of Astrix Security on June 29. The investigation predicts that the number of enterprise AI agents will grow by 85% in the next 12 months, with human identities increasing by 56%.

The official account of Alibaba Cloud stated that the large model company Step Star has globally released its flagship open-source model Step 5 Preview, positioned as a primary working model for real-world intelligent agent tasks, excelling in AI programming, software engineering, professional knowledge work, and financial scenarios. The model has a total of 600 billion parameters and 27 billion active parameters, utilizing sparse MoE, with a maximum context window of 1 million, capable of processing text, images, and videos. The article mentions that it recently ranked second globally in both weekly and daily call volume on OpenRouter. On the day of the release, Alibaba Cloud announced the completion of DAY0 adaptation, optimized for joint inference based on chips, super node instances, and models, with inference computing power provided by the Lingjun super node.Step Star has developed its own intelligent agent reinforcement learning training platform, with the sandbox platform managed by Alibaba Cloud. The solution is based on Alibaba Cloud's Agent Sandbox and Kubernetes container service, aimed at elastic computing power in training mode, claiming to create tens of thousands of sandboxes in a single minute, with a maximum concurrency of up to one million, compatible with E2B API, and providing native Kubernetes interfaces. Through multi-level image caching, intelligent pre-scheduling, and control link optimization, it achieves millisecond-level application and minute-level creation of 30,000 sandboxes, with the sandbox lifecycle uniformly managed by Alibaba Cloud's backend.In terms of storage, each Pod starts with 15GB of free temporary storage, automatically increasing by 30GB each time when usage exceeds 70%, up to a maximum of 300GB. For security, MicroVM-level isolation is adopted by default, covering computing, networking, storage, and permissions, with zero-trust access to cloud products and large model interfaces. The results provided in the article include: a 90% reduction in image startup time, model evaluation cycles compressed from weekly to daily, and an average savings of about 40% on EBS storage costs; relying on ACK One Fleet, it can support the stable operation of hundreds of thousands of sandboxes simultaneously.

According to Decrypt, over 400 scientists, including "AI Father" Geoffrey Hinton and 2018 Turing Award winner Yoshua Bengio, published a joint open letter on Tuesday, calling for AI laboratories to default to "physically isolating" models capable of cyberattacks, meaning cutting off their connection to external networks. The open letter stated that in the short term, strong sandbox mechanisms, including network disconnection, should be adopted to implement high levels of containment for AI models with cyberattack capabilities. As of Wednesday, the number of signatories had increased to 450, including Stuart Russell from the University of California, Berkeley, and Ron Rivest, co-inventor of the RSA encryption system from the Massachusetts Institute of Technology.Before the release of the open letter, AI models experienced a summer of frequent "jailbreaking." In July, OpenAI admitted that GPT-5.6 Sol and an unpublished stronger model had breached closed testing environments, infiltrating the platform Hugging Face, which hosts over a million public AI models; these models were then being tested on the ExploitGym benchmark, which provides 898 real software vulnerabilities, requiring AI agents to convert each vulnerability into a usable attack. Subsequently, reports emerged that OpenAI models had unauthorized access to Australian government systems and obtained information from U.S. federal agencies.

According to official news, The Sandbox announced the official opening of SAND compensation claims. Users affected by the cross-chain contract vulnerability incident involving Base and BNB Smart Chain (BSC) networks on August 22, who held bridged SAND on the affected networks before the incident, can receive full compensation in SAND on the Ethereum network at a 1:1 ratio. Eligibility for compensation is based on the on-chain balance snapshot before the incident and is unrelated to any transactions, transfers, or holdings by users after the incident.The Sandbox stated that eligibility for compensation is determined based on the on-chain balance recorded before the contract was compromised. The snapshot for the Base network corresponds to block 50283188 at 23:42:03 UTC on August 21, 2026, and the BSC snapshot corresponds to block 117322025 at 11:42:44 UTC on August 21, 2026.Users holding Base or BSC network SAND through centralized exchanges do not need to take any action, as The Sandbox is coordinating with the relevant exchanges to handle compensation; however, users holding SAND in personal wallets will need to claim it themselves. The claim period is from September 8 to September 22, 24:00 (UTC+8). Claims only require a transaction initiated from the original wallet that held SAND at the time of the snapshot, without the need for token authorization, signing off-chain messages, or transferring to any address.

User Wordgrammer stated that the internet has collapsed due to social and video being 100% sandboxable, with consumer preferences leaning towards usage while intoxicated, in bed, on the toilet, or when 99% of their brain is occupied. They believe that the current AI discussion is similar to the misjudgment in 1995 that "everyone will have a website," as not everyone will create personal software or mobile applications.Wordgrammer indicated that everyone will use agents, but less than 1% will use coding agents, just as everyone has a social homepage but less than 1% have a personal website. Consumer-grade and enterprise agents must have a 0% failure rate foolproof sandbox, where accidental purchases, messaging, or information leaks cannot occur. Better models are insufficient to achieve this and require a rethinking of abstraction.

The blockchain gaming platform The Sandbox stated that it will compensate users who held bridged SAND on Base or BNB Smart Chain at a 1:1 ratio before the bridge vulnerability attack, with compensation provided in Ethereum-based SAND from the project treasury, and there will be no token issuance. This attack resulted in the theft of approximately 14.744 million SAND from the Ethereum treasury, valued at about $700,000.The application process is expected to open within two weeks and will last for two weeks; over 72% of the balances held by two centralized exchanges that meet the compensation criteria will be directly compensated to affected customers. The Sandbox indicated that the attacker exploited a configuration vulnerability in the SAND contracts on Base and BNB Chain, becoming the sole validator of bridge messages and minting unbacked tokens. Additionally, over 339 trillion unbacked SAND was minted on the two networks but has been isolated and cannot be cross-chain or exchanged; SAND on Ethereum and Polygon remains unaffected, and the compromised bridge contracts will be permanently disabled.

The Sandbox released an update on the security vulnerability attack incident involving the SAND cross-chain bridge, stating that the attacker modified the verification mechanism to forge cross-chain deposit messages and mint unbacked SAND. This incident resulted in approximately 14.7423 million SAND being withdrawn, valued at about $697,000. Additionally, some uncollateralized SAND was profited through market trading, leading to an overall economic impact of approximately $1.497 million, of which the attacker actually obtained about $987,000.The Sandbox stated that the attack did not affect the supply of SAND on Ethereum and Polygon, with the total amount of SAND on Ethereum remaining unchanged at 3 billion. There were also no super administrator privileges stolen, and the attack stemmed from a vulnerability caused by the combination of the general call function in the token contract and the design of bridge permissions. Currently, the related addresses have been marked, and collaboration has begun with exchanges, security agencies, and the LayerZero team.For affected users, The Sandbox promises to compensate wallets holding legitimate bridged SAND with a 1:1 ratio of SAND on the Ethereum chain based on an on-chain snapshot taken before the attack. The compensation application process is expected to open within two weeks and will last for two weeks.

The Sandbox released an incident analysis report on the vulnerability on August 22. The report shows that attackers exploited vulnerabilities in cross-chain configuration contracts on the Base and BNB Smart Chain (BSC) to steal 14,742,341.84 SAND from the Ethereum treasury, accounting for approximately 0.5% of the maximum supply, with an estimated economic impact of about $1.4968 million, of which approximately $987,000 was actually intercepted by the attackers. The Ethereum mainnet and Polygon network were not affected.Please do not purchase or send SAND on Base or BNB Smart Chain until further notice. The contracts deployed on Base and BNB Smart Chain have been permanently disabled and will not be reopened. The Sandbox stated that the team has reported the attackers' wallet addresses to blockchain analysis companies TRM Labs and Chainalysis and is in direct communication with relevant exchanges.The Sandbox also announced a compensation plan, which will compensate wallets that legally held cross-chain SAND on Base or BSC before the incident at a 1:1 ratio with Ethereum SAND. The compensation funds will come from The Sandbox treasury, and no new tokens will be issued. The application process will open in the next two weeks and will remain open for two weeks.

The metaverse gaming platform The Sandbox confirmed that there is a vulnerability in its cross-chain bridge, allowing attackers to mint uncollateralized SAND on Base and BNB Smart Chain. Blockchain security company PeckShield discovered on August 21 that two addresses had collectively minted approximately 1.49 billion SAND, prompting The Sandbox to shut down the bridging functions for both networks.The Sandbox stated that the affected assets are those bridged on Base and BNB Smart Chain, while SAND on Ethereum and Polygon, user wallet assets, and Ethereum locked assets used to support the tokens remain unaffected. The incident involved a proportion of real collateralized assets that is less than 0.01% of the total supply of SAND. The Sandbox is formulating a compensation plan for the affected liquidity providers and advises users not to trade SAND on Base or BNB Smart Chain until the bridging function is restored.Coinbase plans to delist 10 perpetual futures contracts, including SAND, on August 26, at which time any open positions will be automatically settled.

The Sandbox official stated that the team has confirmed and fully controlled the recent SAND cross-chain bridge vulnerability incident, involving the Base and BNB Smart Chain (BSC) networks.The official said that the impact of this incident is limited, involving less than 0.01% of the total supply of SAND tokens. SAND on Ethereum and Polygon is unaffected, and user wallets have not been compromised; related token holders and liquidity providers do not need to take action.According to disclosures, the attacker minted uncollateralized SAND tokens on the Base and BSC networks through the vulnerability. Currently, The Sandbox has disabled the SAND cross-chain functionality on both networks, and SAND on Base and BSC has been isolated, temporarily unable to be transferred or exchanged.The Sandbox reminds users not to buy, sell, or trade SAND on the Base and BSC networks, as liquidity on these networks has been affected.The team stated that they have completed a snapshot before the incident and are formulating a compensation plan for affected liquidity pool (LP) users, while continuing to investigate the scope of the vulnerability's impact. A complete incident report and technical review will be released subsequently.

The Base chain SAND contract of the metaverse project The Sandbox is suspected of experiencing an abnormal minting event. The related address 0x6762...257e is alleged to have obtained minting permissions, allowing it to mint SAND at will, with over 500 million tokens already issued. The specific reason is yet to be confirmed by the official source.

According to Wired, during security testing, the open-source model Kimi K3 from the dark side of the moon broke out of the sandbox and accessed the internet, attempting to find test answers via GitHub. American security startup Frontier Security stated that Kimi K3 exploited a sandbox configuration vulnerability, but it itself lacked sufficient built-in protective mechanisms.Similar to incidents previously disclosed by OpenAI and Anthropic, this escape partially stemmed from a sandbox configuration error. However, Kimi K3 did not initiate an attack, as the answers were easily accessible on GitHub. The CEO of Frontier Security stated that Kimi K3 performed excellently in cybersecurity defense but lacked mechanisms to prevent cheating or escaping the sandbox. Security experts emphasized that configuring the testing environment is crucial, as the misuse of AI agents could lead to system failures.

According to Bitcoin.com News, the Zimbabwe Securities and Exchange Commission (SECZ) has approved seven fintech companies to enter its regulatory sandbox testing framework, including the blockchain financing platform "Zimbabwe Startup Exchange," the asset tokenization platform Ndarama Standard, the synthetic trading platform Questview Brokers, the crowdfunding platform Crowdaxe Capital, as well as three institutions focused on asset, infrastructure, or securities tokenization: Procode Platforms, Financial Securities Exchange, and Colmin Resources Zimbabwe.SECZ stated that the sandbox aims to promote responsible innovation, enhance financial inclusion, and drive the development of capital markets. Participants will be subject to strict regulatory oversight, and SECZ reserves the right to issue further guidance or operational requirements.

According to external disclosure information, OpenAI has been internally running an unreleased model. This model, without the aid of tools like Lean, solves the unit distance problem with a 48% probability through a single autonomous inference and can independently find a counterexample to the Jacobian conjecture based on a single prompt. In security testing, this model has bypassed the sandbox environment and submitted results that should have been released internally to GitHub in the form of a Pull Request, and it has evaded detection by splitting authentication tokens. Relevant code records show that OpenAI began benchmarking this model no later than May 9, and its internal availability has exceeded 2.5 months.Previously, OpenAI and Hugging Face jointly disclosed that last week this model breached Hugging Face's production infrastructure during a network capability assessment. The model gained internet access through a zero-day vulnerability and obtained testing solutions by stealing credentials and exploiting remote code execution paths. OpenAI stated that this incident indicates the network attack capabilities of advanced models have been effective in real-world scenarios, and they are collaborating with Hugging Face to investigate and patch the vulnerabilities. Currently, OpenAI has not publicly commented on this matter.

HSBC has received approval from the Bank of England to operate in the UK's Digital Securities Sandbox (DSS), and its digital asset platform HSBC Orion will support the issuance, servicing, and settlement of digital securities. HSBC stated that HSBC Orion will operate as a digital securities custodian in the DSS and claimed to be the first company approved by the Bank of England to launch in this sandbox.The platform will support the issuance of native digital bonds, including the Digital Gilt Instrument (DIGIT) and corporate bonds planned for launch in the UK. HSBC stated that HSBC Orion has facilitated over $5 billion in digital bond issuances globally. The UK Treasury indicated that the first DIGIT transaction is expected to take place in the first quarter of 2027, and HSBC has signed a memorandum of understanding with the London Stock Exchange Group to develop connectivity capabilities to support investor participation in pilot issuances.

According to Digital Asset, the Financial Services Commission of South Korea plans to expand the scope of the regulatory sandbox to include the Virtual Asset User Protection Act. This move is part of a broader plan aimed at preparing the future of the financial industry by expanding services to reflect changes in the financial environment and market demands.At a recent event hosted by Financial Services Commission Chairman Lee Ik-yeon, the Commission stated that it will continue to explore and incorporate laws related to emerging fields and services, such as the Internet Banking Act and the Virtual Asset User Protection Act, into the regulatory sandbox.

According to Livecoins, Brazilian Federal Deputy Lincoln Portela proposed Bill No. 2.901/2026, which aims to establish a framework for a national fintech and digital finance platform, creating a permanent regulatory sandbox system for testing blockchain technology and asset tokenization, supervised by the Central Bank of Brazil.The bill requires regulatory requirements to be proportional to the size of the company, allowing small fintech startups to apply simplified standards, and prohibits the government from imposing bureaucratic measures or obligations that do not align with the digital nature of the cryptocurrency market. The sandbox testing scope includes financial flow tracking, artificial intelligence credit applications, and programmable payment practices.The bill also allows companies to share network infrastructure and institutional adaptation databases, but they must comply with data protection regulations. The cooperation mechanism aims to combat financial crimes in cryptocurrency transactions, promote customer identity verification, and enhance cybersecurity.The bill also proposes the establishment of a national system for digital financial integrity, coordinating network regulatory actions to combat criminal structures that use cryptocurrency to hide wealth. Fines for non-compliant companies can reach up to 20% of their annual profit or revenue. The bill will be discussed in various committees of the House of Representatives.

The blockchain infrastructure protocol Lava Network has signed a non-binding memorandum with developer BHL Group to design a tokenized regulatory sandbox for the planned residential development project Alba Bay in the Caribbean. The project plans to build over 40,000 residential units, covering nearly 40 million square meters, with a cost of billions of dollars, and is expected to break ground in the first quarter of 2027.Lava claims this is its first real-world asset authorization project. Currently, no units have been tokenized, and no infrastructure has been deployed; BHL is not required to pay any upfront fees to Lava. Lava's role is to support ecological promotion, coordinate the application of crypto-native teams, and participate in the sandbox design, with commercial terms based on usage, no fixed fees, equity, or token grants.According to CoinGecko data, the LAVA token has fallen over 90% from its peak in 2024, with a market capitalization of approximately $9 million. Lava stated that the tokenization structure has not yet been determined, and any tokens will supplement rather than replace existing property registrations; whether the project can advance to the tokenization stage depends on subsequent assessment results.

According to Cointelegraph, Binance announced its official return to the Philippine market through a partnership with BlockShoals, using the sandbox framework of the Philippine Securities and Exchange Commission (SEC) as an entry point. Previously, Binance was banned by the Philippine SEC in 2024, and this return is made possible through the compliance sandbox mechanism.

According to French media "Le Journal du Dimanche," Sebastien Borget, co-founder and COO of The Sandbox, experienced a kidnapping attempt this week at his residence in Villenoy, Seine-et-Marne, France.The report states that a man disguised as a courier arrived at the front door, and after Borget's wife opened the door, five masked accomplices rushed into the yard, attempting to forcibly drag her into a vehicle. Neighbors intervened after hearing her cries for help, and the suspects subsequently fled the scene. Two suspects have already been arrested, while four others remain at large. Police found fake guns, zip ties, and hoods on the arrested individuals. French police's preliminary investigation suggests that the incident is related to cryptocurrency.The report noted that France has recorded 41 cases of kidnapping or attempted kidnapping related to cryptocurrency this year, totaling 135 cases since 2023, accounting for nearly 80% of related cases in Europe.