Security Agency: An unverified BSC contract was attacked, resulting in losses exceeding $600000

Blockchain security agency BlockSec Phalcon has issued a warning stating that its system has detected a series of malicious transactions targeting unverified contracts (0x16d7c6f43df19778e382b7a84bcb8c763971a551) on the Binance Smart Chain (BSC), causing losses exceeding $600000. Due to the fact that the contract is not open source, investigations have shown that the vulnerability stems from a lack of slippage protection. Attackers exploited a fake liquidity pool to harvest TA tokens (0x539ae81a166e5e80aed211731563e549c411b140) and sold them in a legitimate pool for profit. BlockSec Phalcon strongly recommends that users who have authorized this contract immediately revoke their permissions to prevent further losses.