According to ChainCatcher, CertiK monitored that PulsePot.io suffered a flash loan attack. The attacker used the swap logic of the swapProfitFees() function (a public function that handles the tokens of the contract itself) to create an arbitrage opportunity and obtained $21,500.