BSC On-chain MSCST Project Suffers Flash Loan Attack, Loses Approximately $130,000

BlockBeats News, December 29, according to BlockSec Phalcon monitoring, an unknown smart contract MSCST on the BSC chain suffered a flash loan attack, resulting in an estimated loss of about $130,000. The exploit originated from the missing access control (ACL) in the MSCST contract's releaseReward() function, allowing the attacker to manipulate the price of the GPC token in the PancakeSwap liquidity pool (0x12da).