The hash function was vulnerable to certain intermediate states being set to 0 which would allow for large number of output bits to be controlled by a specially constructed input. See writeup for details.

Original writeup (https://4cad.github.io/CTF_Writeups/202006%20Defenit/HashCungDol/Defenit20%20-%20HashCungDol%20Writeup.html).