Security Pitfalls

Reentrancy and the checks-effects-interactions ordering, overflow and underflow before and after Solidity 0.8, tx.origin versus msg.sender, delegatecall risks, and broken access control. Interviewers ask because each of these named exploits has drained real contracts, so recognizing them on sight is table stakes.