BlockSec: The BSC on-chain stake contract suffered a price manipulation attack, resulting in a loss of approximately $133,000.

BlockSec Phalcon detected a suspicious transaction targeting an unknown contract (Stake) on the BSC chain, resulting in a loss of approximately $133,000. The attacker exploited a spot price dependency vulnerability in the Stake contract, manipulating the price of TUR in the TUR-NOBEL pool before staking TUR. The inflated price triggered reward calculations, and the attacker claimed the amplified rewards through referral accounts, ultimately converting the stolen TUR into USDT for profit.