A relayer/forwarder forwards a fixed or insufficient amount of gas to a subcall, or a callee consumes attacker-controlled gas, letting an attacker make required subcalls fail while the outer call still 'succeeds'.
(bool ok,) = target.call(data); // forward enough gas / handle failure
require(ok, "subcall failed");
The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0039 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.