Smart contracts are susceptible to security vulnerabilities due to coding errors and bugs, which can be exploited by attackers to manipulate the behavior of the contract.