The 2016 DAO hack exploited a reentrancy bug to drain 3.6 million ETH.

Reentrancy occurs when an external call allows the callee to call back into the calling contract before it finishes.