Another reentrancy bug gets targeted by hackers – but no users were exposed to the affected contract.