Assuming Ponto's server and client talk to each other I'd bet it wont be long until someone sniffs the data packets and simply forges the packets being sent back to the server. It's child's play for anyone with a intermediate grasp of Internet protocols.