Flash loans grant temporary capital with no collateral, letting an attacker manipulate any single-transaction-derived value (price, share ratio, vote weight) and profit before repaying in the same tx.
// Defenses: TWAP oracles, snapshot-based voting, deposit/withdraw in same-block guards, // and not trusting any value derivable from flash-borrowed capital.
Largest recorded losses in the same failure class — related, not the same bug:
The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0023 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.