The DAO, a smart-contract on Ethereum, was vulnerable to reentrancy attacks and 3 million ETH worth $50 million was stolen from it.

What are some examples of content that mentions reentrancy attacks? Specifically, older content, as the content from June 2016 and forward is easily found through Google.

Does the whitepaper or the yellowpaper or other developer documentations mention reentrancy attacks ?

2 Answers 2


If you are a developer or interested in recreating the attack, I've created two contracts for the purpose of demonstrating exactly how it worked. https://github.com/joeb000/mock-dao-hack

There are also some articles linked in the README file you might find helpful.

  • 1
    Great resource. This will be very useful to new developers when learning about reentrancy. My idea with this thread is to gather information about how widespread documentation and knowledge about reentrancy was prior to The DAO.
    – wetriX
    Commented Aug 14, 2016 at 3:20

Before June 2016

reentrancy hazards if the callback itself executes publish(), subscribe(), or unsubscribe(): repeated actions, missing actions, and inconsistent delivery of messages

always triggers execution of fallback function ( function() { ...} )

→ make fallback function cheap

→ prepare for callbacks (can mess up your state!)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.