An unknown smart contract on the BSC chain was hit by a price manipulation attack, resulting in a loss of around $133,000

BlockBeats News, March 27th, according to BlockSec Phalcon (@Phalcon_xyz) monitoring, an unknown Stake contract on Binance Smart Chain (BSC) was attacked, resulting in a loss of about $133,000.

The root cause was the presence of an immediate price (spot price) dependency vulnerability in the contract. The attacker manipulated the price of the TUR token in the TUR-NOBEL liquidity pool, then staked TUR in the Stake contract, triggering reward calculations based on the inflated price, and extracted amplified rewards through 3 referral accounts, depleting all TUR tokens in the contract, ultimately converting them to USDT for profit.