Flexcoin's exchange had a race condition in its transfer code. An attacker sent thousands of simultaneous transfer requests between user accounts, moving coins from one account to another until the sending account was overdrawn before balances were updated, stealing 896 BTC.