BlockSec: BSC on-chain Stake contract was subjected to a price manipulation attack, resulting in a loss of approximately $133,000.

According to Mars Finance, BlockSec has detected a suspicious transaction targeting an unknown contract (Stake) on the BSC chain, resulting in a loss of approximately $133,000. The attacker exploited a vulnerability in the spot price dependency of the Stake contract, manipulated the TUR price in the TUR-NOBEL pool, and then staked TUR. Based on the inflated price, they triggered reward calculations and claimed the amplified rewards through referral accounts, ultimately converting the stolen TUR into USDT for profit.