Collectibles · Review
ActiveCandy Store Review 2026: MLB & DC NFTs After a Wallet Breach
Candy Digital runs Candy Store, a platform for licensed MLB and DC Comics digital collectibles on Solana. In October 2026 it locked NFT transfers after a security incident and moved users to a new wallet, so caution is warranted.
By the DappsAtlas editorial team · Updated
DappsAtlas score
5.5/10
Mixed
Our verdict on Candystore
5.5/10Candy Store suits collectors who want licensed MLB and DC Comics digital items and are comfortable with NFT drops, auctions and quests. Its strength is a clear product with regular releases and official licences. The main caveat is the October 2026 incident, where NFT transfers were locked and SOL was taken from wallets before a migration to a new Candy Wallet. New users should read the latest updates first and spend cautiously.
Score breakdown
How Candystore scores
- Security
- 3.5/10
- Ease of use
- 6.5/10
- Fees
- n/a
- Features
- 7.0/10
Scores run from 0 to 10 and are based only on facts we could verify. Where information was missing we mark the score n/a rather than guess.
What is Candystore?
Candy Store is the storefront of Candy Digital, a company that describes itself as an innovator in digital collecting entertainment. It sells and trades digital collectibles built around Major League Baseball and DC Comics, with packs, auctions, quests and a marketplace.
The blog shows an active release schedule through autumn 2026: Gold Series MLB drops, All-Star Game ICON packs, standard auctions and weekly comic quests tied to New York Comic Con. Candy was also a launch partner for OpenSea's Solana integration. A search result also quotes Candy's CEO, Tad Smith, discussing the company's next phase on a sports crypto podcast.
The main caution is the October 2026 security incident. On October 12, Candy locked minted NFTs to block transfers and sales while it worked to secure the platform, and later posts refer to restoring SOL taken from wallets. By late October it was migrating NFTs and SOL into a new Candy Wallet powered by MoonPay, which users could claim from October 30.
How Candystore works
Candy Digital issues digital collectibles as NFTs. These are unique tokens on a blockchain, here Solana, that record who owns a licensed item such as an MLB player ICON or a comic-themed card. Collectors buy them in packs, drops and auctions, or from other collectors on the marketplace.
The drops use several formats. Gold Series sales run as reverse auctions, where the price steps over time until buyers take items. Standard auctions are ordinary bidding, with Legendary 1-of-1 items listed from $100. Packs come in rarity tiers, and some collectibles feed into quests: owning a defined set of items within a window earns a reward.
A new Candy Wallet, powered by MoonPay, now holds collections after the October 2026 migration. Candy Credits act as an in-platform reward unit, for example in the ICON Buyback. Candy's own collectibles also became accessible through OpenSea's Solana integration.
8 features
Key features
01
Licensed sports and comics
Sells digital collectibles tied to MLB and DC Comics, including player ICONs and comic-themed sets.
02
Tiered ICON packs
MLB ICON packs come in rarity tiers such as rainbows and Home Run Derby inserts. A 2026 All-Star set has sixty players across four tiers.
03
Auctions and drops
Gold Series drops use reverse auctions. Candy has also introduced standard auctions, starting at $100, for Legendary 1-of-1 ICONs.
04
Comic and MLB quests
Collectors can complete sets of specific comic issues or MLB items to earn rewards, with a redesigned quest tracker for progress.
05
Candy Credits buyback
The ICON Buyback let holders trade MLB ICONs for Candy Credits over a one-week window with a leaderboard prize pool.
06
OpenSea Solana listing
Candy was a launch partner for OpenSea's Solana integration, giving its collectibles access to another marketplace.
07
Candy Wallet
A new wallet powered by MoonPay holds migrated NFTs and SOL after the October 2026 security lock.
08
Offer notifications
Email alerts tell owners when offers are made on collectibles they hold.
Pros and cons
What we like
- Official MLB and DC Comics licensing gives the collectibles a recognisable theme.
- Several ways to collect: packs, reverse auctions, standard auctions, quests and a marketplace.
- Regular, dated communication on the blog, including during the incident.
- OpenSea Solana participation widens where Candy items can be traded.
- Candy Credits and buyback promotions give holders a way to use legacy items.
Watch out for
- The October 2026 incident involved SOL taken from user wallets and a lock on all minted NFTs, which is a serious track record concern.
- Users had to migrate to a new wallet, so they depend on the platform's recovery plan.
- Fees, royalties and pack odds are not set out in the blog posts reviewed here.
- Value depends on licensed MLB and DC Comics interest, so the collectibles can lose appeal quickly.
- No independent audit reports are linked on the blog. Statements about internal audits come from the company itself.
- Reverse auctions, rarity tiers and quests add complexity for newcomers.
Candystore fees
Candy does not publish a fee schedule in the blog posts reviewed here. Marketplace fees, royalties, pack pricing and wallet or withdrawal costs would be shown in the Candy Store checkout and listing screens.
The posts do give some price points, such as standard auctions starting at $100, but those are starting bids, not costs of using the platform. Check the terms and conditions before buying or selling.
Is Candystore safe?
The key safety fact is the October 2026 incident. Candy says it started a security protocol that blocked transfers and sales between wallets, noted that two internal audits had been run, and later referred to restoring SOL taken from wallets. The blog does not give a full technical explanation in the posts reviewed, and the audit results are the company's own statements.
Candy then began moving NFTs and SOL to a new wallet powered by MoonPay. This relies on trust in Candy's migration process and wallet provider. The project does not publish a licence or independent audit reports in the material reviewed. Hold only what you can afford to lose, and keep funds in a wallet you control where possible.
6 steps
How to get started with Candystore
- 1
Read the latest posts on the Candy blog to see the current status of the wallet migration and any NFT transfer restrictions.
- 2
Claim or set up your Candy Wallet if you already hold Candy NFTs, following the steps in the claim announcement.
- 3
Browse Candy Store to see which MLB or DC Comics drops, packs and auctions are open, and read their rarity and pricing details.
- 4
Review the terms and conditions, fees shown at checkout, and the rules for auctions or quests before you commit funds.
- 5
Start with a small purchase and avoid leaving more SOL in the wallet than you need.
- 6
Track quest deadlines and times, since they run on set schedules in Eastern Time.
Who Candystore is for
Candy Store is for baseball and comic fans who want a branded, collector-style entry to NFTs rather than a trading or DeFi platform. It suits people who like set-completion quests and auctions, and who will accept some platform risk after the recent security incident.
Candystore FAQs
What is Candy Store?
Candy Store is the marketplace and drop platform from Candy Digital, where collectors buy, sell and bid on digital collectibles tied to Major League Baseball and DC Comics. Content includes MLB ICON packs, Gold Series drops, standard auctions and comic quests.
Was Candy Store hacked or affected by a security incident?
The blog says Candy locked minted NFTs in place after a security protocol began on October 12, 2026, and later refers to restoring SOL taken from wallets. It then began moving NFTs and SOL into a new Candy Wallet. Check the latest posts for current status before depositing anything.
What is the new Candy Wallet?
Candy has described a new Candy Wallet, powered by MoonPay, that holders could claim from October 30, 2026. It is where migrated NFTs and SOL appear.
Which blockchain does Candy use?
The blog references SOL and an OpenSea Solana integration, which indicates Solana. The project does not mention other chains in the material reviewed.
How do auctions work on Candy?
Candy has announced standard auctions starting at $100, including Legendary 1-of-1 ICONs. It also runs reverse auctions for Gold Series drops and pack sales for ICON sets.
What are Candy Credits?
Candy Credits are a reward unit. In the ICON Buyback promotion, MLB ICONs in a collection were worth Candy Credits over one week, with a $50K prize pool and a 50-spot leaderboard. Redemption terms are not detailed in the blog excerpt.
Is Candy Store a gambling site?
It is a collectibles platform and not a gambling site, but pack purchases and auctions involve price risk. Only spend what you can afford to lose and check the rules where you live.
Compare
Candystore alternatives
Ecomi issues the OMI token for VeVe, a mobile platform for licensed digital collectibles aimed at collectors and token traders.
CryptoKitties is a 2017 Ethereum NFT game where collectors breed and trade unique digital cats, aimed at NFT collectors and curious newcomers.
Same category
More Collectibles dApps
Fractal Visions runs Galxe quests featuring NFT and OAT badges for people interested in Web3 campaigns.
Tezumura Japanese Art Collectible is named as a Japanese art collectible, but its format and offering are not established.
Tron Travels sells a Tron-inspired physical Identity Disc replica with retractable blades, sound effects and customizable colors.
YEY Technologies is a Web3 fandom platform described as offering digital Shinys and in-app points for community engagement.
Zonster appears on listings for crypto-themed commemorative coins, but its status as a dApp or crypto project is unclear.
Same chain
More on Solana
Lido is a liquid staking protocol where users stake ETH and receive stETH, a reward-earning token usable across DeFi, governed by LDO holders.
OKX is a major centralized crypto exchange for spot and derivatives trading, earn products and a Web3 wallet, with its own OKB token.
LayerZero V2 is a cross-chain messaging protocol and bridge infrastructure for developers and asset issuers, connecting dozens of blockchains.
Jito Liquid Staking lets Solana users stake SOL for JitoSOL, a liquid token that accrues staking and MEV rewards.
Marinade is a Solana staking protocol offering native and liquid staking (mSOL) via an auction where validators bid for delegated SOL.
Across is an intent-based cross-chain bridge and swap protocol for moving tokens between Ethereum, rollups and other chains, with an API for apps.
How we checked
Sources
Last updated . Spotted an error? Tell us and we will correct it.