Cross-Function Reentrancy

Mechanism

Cross-function reentrancy occurs when a smart contract triggers an external function call before updating its internal state, allowing a malicious actor to re-enter the contract’s logic through a different, linked function path. This vulnerability exploits the asynchronous nature of decentralized finance protocols where nested calls across disparate modules create inconsistent state transitions. Analysts identify this risk as a structural breakdown in atomicity, where the execution sequence fails to maintain the expected invariants across multiple contract boundaries.