Integer Overflow / Underflow (pre-0.8 or unchecked)

// Solidity 0.8+: checked by default
function transfer(address to, uint256 v) external {
    require(balances[msg.sender] >= v, "insufficient");
    balances[msg.sender] -= v;
    balances[to] += v;
}