The Melo protocol on BSC was exploited via an access control vulnerability. An attacker gained unauthorized access to critical protocol functions, draining approximately $90,000 from user accounts. The incident highlighted insufficient access control checks on sensitive contract functions.