Hi @crypto_economics,
Please see: Reentrancy After Istanbul and https://docs.openzeppelin.com/contracts/3.x/api/payment#PullPayment