Integer overflow/underflow poses risks in smart contracts when arithmetic operations exceed the data type's limits, causing unexpected behavior. Attackers exploit these vulnerabilities to manipulate contracts and steal funds. Proper bounds checking and testing are crucial to prevent such issues, often addressed during audits.