Covers reentrancy, access-control failures, arithmetic and precision errors, unsafe external calls, signature mistakes, denial of service, and insecure randomness.