---
title: "Discussion on \"A Tale of Two Calls: How a Reentrancy Attack Can Take Over Maker's CDPs\" | Hashnode"
description: "Discussion on \"A Tale of Two Calls: How a Reentrancy Attack Can Take Over Maker's CDPs\". Some time ago, I was reviewing an implementation of ERC-3156 and decided to hunt for some unprotected flashloan callbacks. While this depends on the specifics of each case, you usually need a check to restrict who is calling this hook, making it easy..."
url: "https://hashnode.com/posts/a-tale-of-two-calls-how-a-reentrancy-attack-can-take-over-makers-cdps/6776918a817b1ab4ab8dbdee"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [A Tale of Two Calls: How a Reentrancy Attack Can Take Over Maker's CDPs](https://adriro.hashnode.dev/a-tale-of-two-calls-how-a-reentrancy-attack-can-take-over-makers-cdps?utm_source=hashnode&utm_medium=feed)

Some time ago, I was reviewing an implementation of ERC-3156 and decided to hunt for some unprotected flashloan callbacks. While this depends on the specifics of each case, you usually need a check to restrict who is calling this hook, making it easy...

Jan 2, 2025 · 4 min read · adriro.hashnode.dev  
Read the article

-   [#ethereum](https://hashnode.com/tag/ethereum)
-   [#smart-contracts](https://hashnode.com/tag/smart-contracts)
-   [#security](https://hashnode.com/tag/security)

## Written by

[adriro](https://hashnode.com/@adriro)

@adriro

  
[View profile](https://hashnode.com/@adriro)

independent security researcher

## Responses

Markdown supported · ⌘↵ to post

No responses yet.