Some pitfalls for coding in Solidity are here and what kind of pitfalls are there in Serpent?
(This is not related to Python, which is covered here)
Serpent has no private methods: all functions are callable externally, which could be exploited to bypass certain input validation or preconditions. The BTC Relay security Audit revealed such a problem.