How the re-entrance attack (using .call) is able to change the state by using recursive call until it runs out of the gas (and it never reaches to the subsequent line to throw the exception).

I thought EVM will revert the state change if the transaction is running out the gas?

1 Answer 1


you can send more gas with call than send and transfer which have a fixed limit of 2300, but even that isn't considered bulletproof protection anymore


  • if the answer helped you please upvote and accept
    – sola24
    Commented Jul 5, 2022 at 8:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.