External Call Reentrancy

Exploit

External call reentrancy represents a critical vulnerability within smart contracts, particularly those interacting with external contracts in the Ethereum Virtual Machine (EVM) environment. This occurs when a contract calls another contract, and before the initial call completes, the called contract recursively calls back into the original contract, potentially altering its state unexpectedly. The consequence is often unauthorized fund withdrawals or manipulation of contract logic, stemming from a lack of proper state update sequencing.