GoodDollar's reserve contract contained a reentrancy vulnerability that allowed an attacker to repeatedly call withdraw functions before state updates completed. The Protocol Guardians paused contracts and applied a 100% transaction fee to hacker-held tokens to discourage transfers.