BlockSec: BSC Chain Stake Contract Susceptible to Price Manipulation Attack, Losses of Approximately $133,000

Golden Finance reported on March 27 that, according to market news, a suspicious transaction was discovered involving an unknown contract (Stake) on the BSC chain, resulting in a loss of approximately $133,000.
The attacker exploited a vulnerability in the spot price dependency of the Stake contract, manipulated the TUR price in the TUR-NOBEL pool, then staked TUR, triggered reward calculations based on the inflated price, claimed the amplified rewards through a referral account, and ultimately exchanged the stolen TUR for USDT to profit.