In short An attack that abuses a flaw in a smart contract or its surrounding systems to take funds.
Common causes are coding bugs, manipulated price oracles and stolen admin keys. Funds are sometimes partly recovered through negotiation or freezing, but users should not count on it.