# Christian Vari

> Security Researcher. Founder & CEO of Codezen, Head of Audit Operations at Oak Security. Securing blockchain protocols, consensus engines, cross-chain bridges, smart contracts, financial systems.

I’m Christian Vari, Founder & CEO of Codezen, a blockchain security firm focused on auditing financial and Web3 systems.

I’ve worked on 250+ audits, identifying over 900 vulnerabilities and helping securing assets across Solana, Cosmos SDK, Polkadot SDK, Ethereum and EVM ecosystems.

I currently serve as Head of Audit Operations at Oak Security and collaborate with leading security teams in the industry, including Zenith Security and Trust Security.

I’m also Chairman of Altairith Capital, a holding company focused on technology and security-driven ventures.

My work focuses on reviewing smart contracts, protocol logic, and distributed systems, with particular attention to assumptions, invariants, and real-world failure modes.

I’m particularly interested in how AI can assist security research and auditing workflows without reducing depth of reasoning or introducing new risks.

## Links

- Website: https://www.christianvari.dev/
- Email: info@codezen.tech
- X: https://x.com/christianvari_
- LinkedIn: https://www.linkedin.com/in/christianvari/
- GitHub: https://github.com/christianvari
- ORCID: https://orcid.org/0009-0006-3613-4774
- Codezen: https://www.codezen.tech

## Experience

### Codezen (https://www.codezen.tech) · Apr 2022 — Now

- Founder, CEO and Lead Security Researcher

Skills: Management, Blockchain, Rust, Golang, Solidity, TypeScript, CosmWasm, Cosmos SDK

### Altairith Capital Holding (https://www.altairith.capital) · Sep 2025 — Now

- Chairman

Skills: Management, Investing, Risk Management

### Oak Security (https://www.oaksecurity.io) · Feb 2022 — Now

- Head of Audit Operations (Mar 2026 — Now)
- Lead Security Researcher (Sep 2022 — Mar 2026)
- Blockchain and Smart Contract Auditor (Feb 2022 — Sep 2022)

Skills: Blockchain, Rust, Golang, Solidity, TypeScript, CosmWasm, Cosmos SDK, Solana, Anchor, Polkadot SDK

### Zenith Security (https://www.zenith.security) · Jan 2025 — Now

- Security Researcher

Skills: Blockchain, Rust, Golang, Solidity, TypeScript, CosmWasm, Cosmos SDK, Solana, Anchor, Polkadot SDK

### DeFi Talents @ Frankfurt School of Finance & Management (https://web3-talents.io/defi-talents/) · Sep 2023 — Aug 2025

- Mentor

Skills: Blockchain, Finance, Management, Economy, Teaching

### HCL Technologies (https://www.hcltech.com) · Apr 2020 — Aug 2022

- Software Engineer II (Nov 2021 — Aug 2022)
- Junior Software Engineer (Apr 2020 — Nov 2021)

Skills: Virtual Reality, Microservices Architecture, NLP, Node.js, React, Python, AI, ChatBots, Scrum Master

### Freelance developer · Jan 2018 — Apr 2020

- Full Stack Developer

Skills: Solidity, Node.js, React, Python, C++, C-AVR

## Education

- Tor Vergata University of Rome: Blockchain & Cybersecurity
- Sapienza University of Rome: Software and Automation Engineering

## Research

Patents, papers and applied research on blockchain security, smart contract auditing and AI-assisted security tooling. Hub: https://www.christianvari.dev/research/

- **[A method for generating a cybersecurity report](https://www.christianvari.dev/research/cybersecurity-report-generation.md)** — Patent (it: "Un metodo per eseguire la generazione di un report di sicurezza informatica") — IT202400016273A1. Granted patent, 2026 (filed 2024). Machine-learning pipeline that merges auditors’ vulnerability notes, rewrites them in report style and assigns a severity, automating security audit reports. Official record: https://worldwide.espacenet.com/patent/search?q=pn%3DIT202400016273A1

## Expertise

Ecosystems: Solana, Cosmos SDK, Polkadot SDK, Ethereum, EVM, CosmWasm, Anchor, Substrate, Filecoin FEVM, Stellar.
Skills: Solana, Anchor, Polkadot SDK, TypeScript, C++, Risk Management.

Security reviews by technology (number of audits):
- Rust: 83
- Golang: 70
- Cosmos SDK: 64
- CosmWasm: 54
- Solidity: 37
- Substrate: 13

## Security reviews

191 completed audits, 2541 issues found. Full list: https://www.christianvari.dev/audits.md (JSON: https://www.christianvari.dev/audits.json).

Selected work:
- [Stellar Core Protocol 23 Changes](https://www.codezen.tech/audits/stellar-core-protocol-23/) — Blockchain node audit — with Oak Security — 81 issues (2 critical, 1 major, 35 minor, 43 informational) — tags: Blockchain, C++, C, Soroban, Rust, Audit, Stellar — [report](https://github.com/oak-security/audit-reports/blob/8a29e1d31c20fdc68bc732b1db73c4660d3fa507/Stellar/2025-10-17%20Audit%20Report%20-%20Stellar%20Core%20Protocol%2023%20Changes%20v1.0.pdf)
- [DATA Network (Story Protocol) L1](https://www.codezen.tech/audits/data-network-story-protocol-l1/) — Cosmos SDK chain audit — with Trust Security — 23 issues (5 critical, 6 major, 7 minor, 5 informational) — tags: Blockchain, Cosmos SDK, Golang, Audit, Ethereum, Solidity — [report](https://github.com/piplabs/story/blob/b99f39e1cc41a778932aa9d82e8f099dcd987dde/audits/Trust_Story_L1_v03.pdf)
- [Snowbridge](https://www.codezen.tech/audits/snowfork-snowbridge/) — Cross-chain bridge audit — with Oak Security — 33 issues (3 critical, 8 major, 9 minor, 13 informational) — tags: Blockchain, Rust, Solidity, Substrate, Polkadot, Audit, Ethereum, Bridge — [report](https://github.com/oak-security/audit-reports/blob/1569d1644cf4b51e0f2bfbdecbff5b39c131bac3/Snowbridge/2024-05-24%20Audit%20Report%20-%20Snowbridge%20v1.1.pdf)
- [Cosmos SDK](https://www.codezen.tech/audits/cosmos-sdk-v0-47/) — Cosmos SDK framework audit — with Oak Security — 37 issues (3 critical, 8 major, 13 minor, 13 informational) — tags: Blockchain, Golang, Cosmos SDK, Audit — [report](https://github.com/oak-security/audit-reports/blob/1569d1644cf4b51e0f2bfbdecbff5b39c131bac3/Cosmos%20SDK/2024-01-23%20Audit%20Report%20-%20Cosmos%20SDK%20v1.0.pdf)
- [Filecoin EVM (FEVM)](https://www.codezen.tech/audits/filecoin-fevm/) — EVM implementation audit — with Oak Security — 34 issues (3 critical, 15 major, 8 minor, 8 informational) — tags: Filecoin, Rust, Golang, Audit, EVM, Solidity, Ethereum — [report](https://github.com/oak-security/audit-reports/blob/429d51de1f390c56951db08c51e10e5adf75e8a8/Filecoin%20Foundation/2023-03-09%20Audit%20Report%20-%20Filecoin%20EVM%20(FEVM)%20v1.1.pdf)
- [Cosmos Interchain Security](https://www.codezen.tech/audits/cosmos-interchain-security/) — Cosmos SDK chain audit — with Oak Security — 16 issues (2 critical, 2 major, 7 minor, 5 informational) — tags: Blockchain, Golang, Cosmos Hub, Cosmos SDK, Audit, Interchain Security, IBC — [report](https://github.com/oak-security/audit-reports/blob/0cea9f4e6b9a1eaf55b413765aae1e413e44de5f/Cosmos/2023-06-23%20Audit%20Report%20-%20Cosmos%20Interchain%20Security%20v1.0.pdf)

## Achievements

- Crypto.com Cassini Competition Winner (2022): https://medium.com/crypto-org-chain/cassini-cronos-incentivised-testnet-competition-official-rules-official-rules-8555f6e2432f
- Crypto.com Crossfire Competition Winner (2021): https://blog.crypto.com/crypto-com-chain-crossfire-mainnet-dry-run/

## Certifications

- BTA Certified Developer on Polkadot with Substrate — Blockchain Training Alliance: https://www.btacertified.com/dlink/c3955d74375fbab4583ae9cb30b5353902c98708733d099dae973071c4bfd3e9/certdisplayhash
- Interchain Foundation Developer Academy — Cosmos Developer Academy: https://badgr.com/public/assertions/rUtwHYr-SOmTF3zEZnXycQ

## Contact

- Website: https://www.christianvari.dev/
- Email: info@codezen.tech
- X: https://x.com/christianvari_
- LinkedIn: https://www.linkedin.com/in/christianvari/
- GitHub: https://github.com/christianvari
- ORCID: https://orcid.org/0009-0006-3613-4774
- Codezen: https://www.codezen.tech