In this example from the Solidity documentation, inside the
bid function, there is this comment:
Sending back the money by simply using highestBidder.send(highestBid) is a security risk because it could execute an untrusted contract. It is always safer to let the recipient withdraw their money themselves.
Why would this be a security risk? Can someone provide an example? Thanks in advance.