PANews December 29 News, according to BlockSec Phalcon monitoring, an unknown smart contract MSCST on the BSC chain was subjected to a flash loan attack, with an estimated loss of approximately $130,000. The vulnerability stems from the lack of access control (ACL) in the releaseReward() function of the MSCST contract, allowing attackers to manipulate the price of GPC tokens in the PancakeSwap liquidity pool (0x12da).