Reentrancy

A smart contract vulnerability where an external call allows an attacker to re-enter a function before its state is updated. The 2016 DAO hack ($60M) exploited reentrancy. Prevented by the Checks-Effects-Interactions pattern and ReentrancyGuard modifiers.