P2P

highlights

  • Implementation of GossipSub 1.4 is complete, and only final checks are pending
  • Improved performance of Yamux by creating a zero allocation queue (this is to be used in other parts of nim-libp2p)
  • Fixed yamux session close so streams are closed instead of reset
  • Completed performance evaluations for GossipSub v1.4, v1.4+stagger, PPPt, 2.0
  • Daily CI jobs are back online

report

Tokenomics (public version)

highlights

  • Created and delivered a one-pager explaining the Ghost Token Agent system.
  • Reviewed and commented on the Catsfishing “Inheritance Plan” documents.
  • Proposed ideas for Codex Incentivized Testnet and mainnet transition strategy.
  • Supported Status Karma with analysis and reports on Linea’s priority fees for 2024–2025 using Dune analytics.
  • Finalized specifications for NomosDA fee mechanisms and block rewards.
  • Conducted in-depth analysis and proposals for LOGOS token design: Basket representation, unique token, and shared capital layer models, Mint-redeem mechanisms and arbitrage strategies with BU tokens.
  • Explored SNT integration and minting constraints.
  • Developed a data-driven token valuation framework using Random Forest Regression.

report

  • vac:tke:ift:ghost:ad-hoc

    • Overview:
      • One pager explanation of Ghost utility
    • Completed tasks:
      • vac:tke:ift:ghost:ad-hoc:one-pager
  • vac:tke:ift:catsfishing:ad-hoc

    • Overview:
      • Check and review “inheritance doc”
      • Comments on documentation/QA
    • Completed tasks:
      • vac:tke:ift:catsfishing:ad-hoc:review-inheritance
      • vac:tke:ift:catsfishing:ad-hoc:comments-on-docs
  • vac:tke:codex:cdx-launch

    • Overview:
      • Ideas for Incentivized Testnet
    • Completed tasks:
      • vac:tke:codex:cdx-launch:testnet-proposal
  • vac:tke:status:karma-incentives

    • Overview:
      • Wrote down report on priority fees on Linea for 2024 and 2025
    • Completed tasks:
      • vac:tke:status:karma-incentives:linea-usage-report
      • vac:tke:status:karma-incentives:linea-usage-dune
  • vac:tke:nomos:macroeconomy

    • Overview:
      • Finalization of NomosDA and block rewards specifications
    • Completed tasks:
      • vac:tke:nomos:macroeconomy:block-rewards
      • vac:tke:nomos:macroeconomy:final-nomosda
      • vac:tke:nomos:macroeconomy:revision-da
  • vac:tke:ift:tokenomics-research-forum

    • Overview:
      • Data-Driven Token Valuation using Random Forest Regression
    • Completed tasks:
      • vac:tke:ift:tokenomics-research-forum:token-valuation
  • vac:tke:ift:support-to-ift-units

    • Overview:
      • Review of Logos as a representation of a basket Token
      • Proposal of LOGOS as a separate token
      • Proposal of LOGOS as the unique token
      • Proposal of LOGOS as shared capital layer
      • Mint-Redeem Mechanisms for LOGOS/BU tokens
      • Studies of arbitrage between Logos and BU tokens
    • Completed tasks:
      • vac:tke:ift:support-to-ift-units:logos-basket-review
      • vac:tke:ift:support-to-ift-units:logos-single
      • vac:tke:ift:support-to-ift-units:logos-unique
      • vac:tke:ift:support-to-ift-units:logos-shared-capital
      • vac:tke:ift:support-to-ift-units:logos-mint-redeem
      • vac:tke:ift:support-to-ift-units:logos-bu-unconstrained
      • vac:tke:ift:support-to-ift-units:logos-bu-arbitrage

QA

highlights

  • Extensive test coverage completed for Gossipsub in nim-libp2p
  • Go-waku removed from waku-interop-test workflows
  • Several stability and schema issues found and reported in waku-go-bindings
  • Status 2.34 release tested and signed off; Qt6 migration well underway
  • Logging improvements and critical test automation added to status-go
  • TF-IDF based log parsing introduced for faster nomos testnet debugging
  • Waku Sync tests implemented
  • Peer exchange and store protocols investigated and validated in nwaku
  • Appium and Squish investigated for tablet testing in status-qa-mobile
  • Planning, retro, and Q3 commitment cycles completed for QA team

report

DST

highlights

  • Found bug in mix implementation (message routing), worked with devs to reproduce/identify and fix it
  • Found issue in mix delay times (excesive latency), will be analyzed next quarter
  • Helped p2p team to find issues in Quic that were not able to reproduce locally
  • Confirmed IDONTWANT changes have no negative effect in nimlibp2p changes
  • Find issues in nWaku v0.36 (store request, lightpush)
  • Started planning EF grant proposal

report

SC

highlights

report

ACZ

highlights

report

RFC

highlights

  • Resumed work on Status RFCs - Staking
  • Completed the first iteration of Nomos RFCs

report

Nim

highlights

Security

highlights

  • 2FA enabled in all critical services.
  • Investigated and validated remediation steps for Status-323 and Status-324 vulnerability tickets.
  • Performed a security audit of the Status web architectural changes outlined in status-web (issue#692).
  • Keycard incidents involving POps and Keycard members.
  • Reviewed security setup of the Matrix org server, rooms, chats, devices and users.
  • Developed a function to update the master wallet index when on-chain data changed.

report

  • ift:2025q2-iam-operations

    • Mediate access to DeFi protocols and smart contracts to Investment Roles
    • Remove users and groups no longer needed in critical services and apps
    • Ensure that all critical services and applications have 2fa enabled for all users
    • Output:
      • Removed users no longer needed in Github. [Reference]
      • Validated 2FA is enabled in all critical services
    • Tasks:
      • ift:2025q2-iam-operations:remove-unnecessary-users
      • ift:2025q2-security-automation:access-revalidation
      • ift:2025q2-iam-operations:defi-aave-maple-update
      • ift:2025q2-iam-framework:2fa-enabled-review
  • ift:2025q2-security-operations

    • Identify, assess, prioritize, and mitigate security vulnerabilities across the org infrastructure and programs.
    • Identify, respond to, and resolve security incidents, with clear communication, ensuring minimal disruption to business operations.
    • Output:
      • Investigated and validated remediation steps for Status-323 and Status-324 vulnerability tickets.
      • Conduct a focused security review of Harbor image collections; validate reported CVEs and ensure patched images are promoted
      • Performed a security audit of the Status web architectural changes outlined in status-web (issue#692)
      • Keycard incidents involving POps and Keycard members
    • Tasks:
      • ift:2025q2-security-operations:incident-response
      • ift:2025q2-security-operations:vulnerability-management
      • ift:2025q2-vulma-and-ir:remediation-tracking
  • ift:2025q2-custody-improvement-plan:signatory-registry-implementation

    • Implement and maintain a secure registry of signers and wallet owners within the organization
    • Output:
      • Collected and verify signatory information based on new schema
      • Secure access to the protected signatory registry (secure vault)
      • Review security setup of the Matrix org server, rooms, chats, devices and users
    • Tasks:
      • ift:2025q2-signatory-registry:signatory-vault-deployment
      • ift:2025q2-signatory-registry:signatory-data-verification
      • ift:2025q2-migration-to-element:instance-hardening-review
  • ift:2025q2-cicd-security-review

    • Improve GitHub Actions access controls and secret management.
    • Review and enhance CI/CD Pipelines
    • Output:
      • Review Dependabot pull requests for security patches and assess for merge readiness.
      • Audit dependencies flagged by Dependabot for transitive risk and perform validations.
      • Started design review of the role/model MVP implementation for Status team (issue#667)
      • Started working on security requirements review for Status wallet and desktop (issue#692)
    • Tasks:
      • ift:2025q2-cicd-security-review:gha-hardening
      • ift:2025q2-cicd-security-review:cicd-security-hardening
      • ift:2025q2-cicd-security-review:status-design-reviews
  • ift:2025q2-audit-plan-refinement

    • Output:
      • Collaborate with the Codex engineering team to review recent Vault optimizations for hidden risks.
      • Status external audit request - defining scope, requirements and pre-audit evaluation
      • Codex external audit request - defining scope, requirements and pre-audit evaluation
    • Tasks:
      • codex:2025q2-audit-plan-refinement:smart-contract-testing
      • status:2025q2-audit-plan-refinement:pre-audit-evaluation
      • codex:2025q2-audit-plan-refinement:pre-audit-evaluation
  • ift:2025q2-security-workflow-automation

    • Design, deploy and maintain automated workflows to support critical Security Ops and procedures
    • Output:
      • Develop a function to update the master wallet index when on-chain data changed
      • Sync master wallet index with onchain data (L1/L2 networks) by executing the wallet registry tool
    • Tasks:
      • ift:2025q2-automate-wallet-index-update:add-update-function-to-handler
      • ift:2025q2-security-automation:automatic-wallet-index-updates
  • ift:2025q2-sec-infra-maintenance

    • Ensure the ongoing maintenance and optimization of our security infrastructure
    • Output:
      • Managed the renewal of the IFT Github Enterprise License
    • Tasks:
      • ift:2025q2-sec-infra-maintenance:gh-enterprise-renewal

Nescience

highlights

report