PANews reported on December 29th that, according to BlockSec Phalcon monitoring, an unknown smart contract MSCST on the BSC chain suffered a flash loan attack, estimated to have caused approximately $130,000 in losses. The vulnerability stemmed from a missing access control (ACL) function in the MSCST contract's releaseReward() function, allowing attackers to manipulate the price of GPC tokens in the PancakeSwap liquidity pool (0x12da).