The MSCST project on the BSC chain suffered a flash loan attack, resulting in a loss of approximately $130,000

According to market news, an unknown smart contract MSCST on the BSC chain has suffered a flash loan attack, resulting in an estimated loss of about $130,000.

The vulnerability stems from the lack of access control (ACL) in the releaseReward() function of the MSCST contract, allowing attackers to manipulate the price of GPC tokens in the PancakeSwap liquidity pool (0x12da).