How Can Dapps Be Hacked ?

I work with coding contracts on solana and even I don’t understand how a outside party can hack a contract

Outside of leaving your private keys somewhere public how does a hacker hack exploit a dapp from the outside ?