
Ξ Smart contract security researcher @zenith256, @spearbit, @bailsecurity, @SecurityOak & @zerocool_ai | AI Red Teaming 🔄
Solidity, Rust & Cairo
Joined January 2022
- Tweets461
- Following650
- Followers1.4K
- Likes4.8K
Built by @J4X_Security
Tokenized stocks. One app. @Stature_finance
Don't be late → stature.finance/share/BNC7tc…
Mario Poneder retweeted
The Tetris Effect: when you've done something so long, it starts leaking into your dreams.
For @marioponeder, that means dreaming about the codebases he’s auditing.
This is the story of how a former engineering physicist (and powerlifter) became a Zenith auditor.
Really enjoyed reviewing their codebase. Fantastic team to work with and wishing them all the best with USDv. 🚀
Mario Poneder retweeted
I have been cooking hard for the last weeks
Tokenized stocks are the big new thing, but they are pretty much unusable for 99% of the population. Stature is gonna change that
Please leave a follow and sign up for the waitlist; I'm happy about every single one of you who can test it out in Beta soon.
Buying tokenized stocks shouldn’t require a DeFi survival guide.
Meet Stature.
Join the waitlist → stature.finance
After years in security, I decided to build something myself.
Livestreams have always felt way too passive to me. Viewers should be able to actually influence what happens next.
That's why I'm building Rile, a platform where any terrible idea can come to life if enough people want to see it happen ↓
Watching is fun. Being part of what happens is better.
Rile lets viewers put money behind challenges they want to see, making streams more interactive for chat while opening up a new revenue stream for creators.
Everybody wins.
Join the waitlist at rileapp.com
Proud to be part of the Zenith lineup!
The Tetris Effect: when you've done something so long, it starts leaking into your dreams.
For @marioponeder, that means dreaming about the codebases he’s auditing.
This is the story of how a former engineering physicist (and powerlifter) became a Zenith auditor.
Nearly seven weeks of security audit work with Meteora so far, and it’s been a pleasure throughout. 🫡
Meteora has done $333B+ in swap volume on Solana.
That kind of volume drives constant pressure to improve and meet demand.
But even with that pressure, @meteoraAG has never compromised on security.
Here’s how Meteora and Zenith have worked together to secure Solana.
It was a pleasure taking risks alongside you legends and then making it count by betting it on black afterwards!
Thanks to @Wonderland and all the sponsors.
Had a fun time playing this year's @Wonderland CTF with the chads, thx to all the challenge creators and the great team that organized the event 🙏
@0xriptide @heavyw8t_ @MarioPoneder @zigtur
Totally agree — prompt injection feels like a natural extension of the smart contract security mindset.
Personally, I’m too occupied with Web3 work to properly participate in AI red teaming competitions right now 😅
But definitely not wanting to gatekeep the opportunity: app.grayswan.ai/arena
@GraySwanAI
In case someone wants to test their prompt injection skills in a priced competition setting.
Diving into AI red teaming: prompts are like comments — non-binding. Same lesson across stacks: security boundaries must be enforced, not “requested.” For agents, the real boundary is between the decision (LLM) layer and the execution layer.
It was a pleasure reviewing your protocol together with @strukt93! 🔍
An amazing project to work on once again—my pleasure. 🫡
We are currently in the process of conducting an audit for @0xProject .
BailSec is tasked with an audit of the CrossChainReceiver.
Be sure to keep yourself informed by following
@bailsecurity for important updates.
End of 2024: grateful, euphoric, and wondering how my career could possibly get better.
2025’s answer: Zenith.
As 2025 comes to a close, here's a look back at what our team accomplished this year at Zenith.
1.) Nearly half of our 243 audits found High's and Crit's. In total, we found 292 High and 96 Critical-severity vulnerabilities.
2.) Starting audits under 24 hours' notice. Clients raved about this. Thank you to every Zenith auditor who made this possible. Your dedication, expertise, and clear communication were the key.
3.) We worked with leading protocols including Bridge, Zama, and Jupiter. We spanned 21 ecosystems, including Ethereum, Monad, Base, Solana, Move, and Starknet.
2025 was Zenith’s inaugural year, and we’re excited for what’s ahead in 2026. A huge thanks goes to our clients, partners, and team for making this possible.
Interested in a Zenith audit in 2026? Link in bio!
Mario Poneder retweeted
Finalised a huge audit last week. Spent almost 4 weeks securing @StarkWareLtd's Cairo itself, together with the G @MarioPoneder, for the @zenith256 team.
Working on a language and its libraries itself offers so many new surfaces which made this one interesting af. Really grateful I could do my part to keep @Starknet safe!
Mario Poneder retweeted
SR-Boat Cannes edition
A full day of touching water and finally getting some sun with @amyyy_g_ @heavyw8t_ @MartinMarchev @mattaereal @n4nika_ @bitbugshar @MarioPoneder @eugenioclrc @bernd_eth @p_misirov @BazziBazzani @HickupH @kamensec @rotcivegaf @gorgut_ @0xWeisss
Happy to share this client feedback!
Dissecting a neat and sophisticated codebase – like theirs – is especially emotionally rewarding.
@Possum_Labs @TopCutFinance
Congrats!
I am happy to experience the launch first-hand being tied up in a 6-week review @zenith256 !
Mario Poneder retweeted
Replying to @n4nika_
@n4nika_ and I have been cooking up some (partially beginner-friendly) Web3 challenges for this year's Glacier-CTF.
If you wanna try to crack our 100% secure code, check out glacierctf.com/ in the evening. Chals will be open for 24h.



























