BlockSec: Stake contract on BSC chain suffered price manipulation attack and lost approximately US$133,000

According to market news, a suspicious transaction against an unknown contract (Stake) on the BSC chain was discovered, causing a loss of approximately US$133,000. The attacker took advantage of the spot price dependence vulnerability in the Stake contract to manipulate the TUR price in the TUR-NOBEL pool and pledge the TUR, trigger reward calculation based on the pushed up price, receive the amplified reward through the recommendation account, and finally convert the stolen TUR into USDT to make a profit.