Cross-Function Reentrancy Attacks in Kadena Smart Contracts

This report analyzes a proof-of-concept cross-function reentrancy attack against Kadena's Pact smart contract language: a malicious external module is granted a capability during execution and reenters a different function to inflate an attacker's balance, demonstrating that Turing incompleteness (no unbounded recursion) does not prevent all reentrancy vectors and recommending careful auditing of Pact contracts.