CertiK announced on platform X that a flash loan vulnerability affecting PulsePot.io has been detected. The attacker exploited the swapProfitFees() function's swapping logic (which is a public function handling the contract's own tokens) to create arbitrage opportunities and profit $215,000.