I'm reading source code of PancakePair contract and see that mint function doesnt check msg.sender or owner. Is that mean i can call mint function freely to get LP tokens?
Sure ! That’s the idea !
Read the rest of the code, the amount of LP token minted is proportionate to the difference between reserves and observed balances. If you don’t add liq, those differences are 0 