A reentrancy vulnerability in LibertiVault's deposit function allowed attackers to mint excess shares by re-entering before totalSupply was updated. The attacker used flash loans to deposit funds, called deposit() recursively, and claimed inflated rewards before the state was finalized.