CertiK: Detected a flash loan vulnerability affecting PulsePot.io

CertiK published a post on the X platform saying that it had detected a flash loan vulnerability affecting PulsePot.io. The attacker used the swap logic of the swapProfitFees() function (which is a public function that handles the tokens of the contract itself) to create an arbitrage opportunity and make a profit of $215,000.