Writing to two systems (the database and a message broker) in one operation without atomicity, so a crash can leave them disagreeing.