def attack(): for _ in range(5): requests.post(url, json=data, headers=headers)

for t in threads: t.join() Vulnerable pseudocode:

threads = [] for _ in range(20): t = threading.Thread(target=attack) t.start() threads.append(t)

Never separate the check and update of a critical resource without proper locking or atomic operations.