Function Call Reentrancy

Action

Function call reentrancy represents a critical vulnerability in smart contract design, particularly within decentralized finance (DeFi) protocols and cryptocurrency ecosystems. It arises when a contract, during the execution of a function, recursively calls itself before the initial invocation completes, potentially leading to unintended and exploitable state changes. This recursive call can be triggered by external actors or internal logic, often exploiting a flaw in the contract’s control flow. Mitigation strategies frequently involve employing reentrancy guards, which temporarily disable the contract’s external interface during critical operations, preventing further calls until the initial transaction concludes.