MSCST project on BSC suffers flash loan attack, with losses of approximately $130,000

PANews reported on December 29 that, according to BlockSec Phalcon monitoring, an unknown smart contract MSCST on the BSC chain suffered a flash loan attack, resulting in an estimated loss of about $130,000. The vulnerability originated from the lack of access control (ACL) in the releaseReward() function of the MSCST contract, allowing the attacker to manipulate the price of the GPC token in the PancakeSwap liquidity pool (0x12da).