Matías Barrios

I am a Blockchain Security Researcher operating across EVM and Solana ecosystems, with an expanding focus on zero-knowledge systems. I specialize in game-theory attack vectors and excel at identifying subtle vulnerabilities in complex, multi-protocol systems — validating them through rigorous software-based Proofs of Concept that often surface weaknesses requiring deep system understanding.

I approach security from a builder's perspective. Before specializing in offensive research, I spent several years shipping production smart contracts and on-chain infrastructure on Ethereum — designing Solidity protocols, operating Chainlink oracle infrastructure, and integrating institutional custody flows with Gnosis Safe. That hands-on engineering background, combined with formal training in cryptography (Mathematical Foundations for Cryptography and Classical Cryptosystems, University of Colorado) and an Electronic Engineering degree, lets me analyze code with both an attacker's and a developer's mindset — whether I'm reviewing a Solidity contract, a Rust-based Solana program, or a cross-chain protocol that lives in both worlds.

Currently I'm a Security Researcher at Spearbit. Before that, I worked as an Offensive Security Engineer at Halborn and as a Blockchain Security Expert at Kudelski Security.

Auditing Experience

Selected engagements across EVM and Solana:

• LayerZero — cross-chain messaging protocol.
• Rome EVM — EVM execution layer running on Solana.
• Agave's Runtime and Agave's Partition Rewards — core Solana validator client components.
• USDC (Centre Consortium) — audited the Paris fork covering domain separator changes.
• Star Atlas — led a 1.5-year security partnership and identified multiple high- to critical-severity findings across the protocol's on-chain programs.
• Securitize, Magic Eden, Layer3, PsyFi / PsyOptions, and additional protocols.

Where I've worked

• Spearbit — Security Researcher (Mar 2026 – present).
• Halborn — Offensive Security Engineer (Feb 2024 – Mar 2026).
• Kudelski Security — Blockchain Security Expert (Feb 2022 – Jan 2024).

Engineering Background

A selection of the protocol-engineering work that shaped my security approach:

• DSLA Protocol — Lead Blockchain Engineer. Main contributor to the DSLA smart contracts and creator of the DSLA developer toolkit. Designed and implemented the Solidity codebase end-to-end, operated the Chainlink Node infrastructure as an external adapter operator, and built the supporting front-end and back-end stack.
• Credora — Lead Blockchain Engineer. Designed and implemented a custom solution to sign meta-transactions using Fireblocks as one of the signers of a 2-of-3 Gnosis Safe multisig — integrating institutional custody with on-chain governance flows.
• Celo — Blockchain Developer. Ecosystem development contributions.
• ConsenSys Academy — Associate Mentor. Mentored developers through the Ethereum Blockchain Developer program after completing it twice myself. Featured in a ConsenSys Academy interview about the program.

Tech Stack

• EVM: Solidity, Foundry, Hardhat, Truffle. Deep familiarity with Chainlink, Gnosis Safe, and The Graph.
• Solana: Rust-based programs, Anchor framework, Solana Program Library.
• Languages: JavaScript, TypeScript, Rust (advanced); Python, C, Bash (proficient).
• Full-stack JS: Node.js, Vue.js, React.js, Next.js, Nest.js, Express.js, Jest.

Training & Certifications

• RareSkills ZK Bootcamp — zero-knowledge security foundations, with a focus on the mathematical underpinnings necessary to audit ZK systems correctly.
• University of Nicosia — Blockchain Developer certification (Feb 2021 – Jan 2022).
• University of Colorado — Mathematical Foundations for Cryptography (May 2020).
• University of Colorado — Classical Cryptosystems and Core Concepts (Apr 2020).
• ConsenSys Academy — Ethereum Blockchain Developer (Aug 2019).
• ConsenSys Academy — Ethereum Blockchain Developer (Oct 2018).