A battery management system comprising: a first voltage sensor configured to detect a first voltage between a first terminal and a second terminal of a first battery ; a second voltage sensor configured to detect a second voltage between a first terminal and a second terminal of a capacitor provided on a side of an electrical load; a high-side driver connected to a first end of a contactor coil included in a main contactor installed between the first terminal of the first battery and the first terminal of the capacitor; a low-side driver connected to a second end of the contactor coil; a malfunction prevention circuit including a safety switch , the safety switch is installed between the first end of the contactor coil and the high-side driver or between the second end of the contactor coil and the low-side driver; and a control circuit operably coupled to the high-side driver, the low-side driver, the first voltage sensor, the second voltage sensor and the malfunction prevention circuit, wherein the control circuit is configured to: determine a first threshold voltage based on the first voltage, and output a first high-level signal when the second voltage is equal to or higher than the first threshold voltage, wherein the malfunction prevention circuit is configured to output a second high-level signal to the safety switch in response to the first high-level signal when a third voltage between a first end and a second end of the main contactor is lower than a second threshold voltage, and wherein the safety switch is turned on by the second high-level signal. a first voltage sensor configured to detect a first voltage between a first terminal and a second terminal of a first battery ; a second voltage sensor configured to detect a second voltage between a first terminal and a second terminal of a capacitor provided on a side of an electrical load; a high-side driver connected to a first end of a contactor coil included in a main contactor installed between the first terminal of the first battery and the first terminal of the capacitor; a low-side driver connected to a second end of the contactor coil; a malfunction prevention circuit including a safety switch , the safety switch is installed between the first end of the contactor coil and the high-side driver or between the second end of the contactor coil and the low-side driver; and a control circuit operably coupled to the high-side driver, the low-side driver, the first voltage sensor, the second voltage sensor and the malfunction prevention circuit, wherein the control circuit is configured to: determine a first threshold voltage based on the first voltage, and output a first high-level signal when the second voltage is equal to or higher than the first threshold voltage, wherein the malfunction prevention circuit is configured to output a second high-level signal to the safety switch in response to the first high-level signal when a third voltage between a first end and a second end of the main contactor is lower than a second threshold voltage, and wherein the safety switch is turned on by the second high-level signal. determine a first threshold voltage based on the first voltage, and output a first high-level signal when the second voltage is equal to or higher than the first threshold voltage, wherein the malfunction prevention circuit is configured to output a second high-level signal to the safety switch in response to the first high-level signal when a third voltage between a first end and a second end of the main contactor is lower than a second threshold voltage, and wherein the safety switch is turned on by the second high-level signal. <EOS>