Maintaining existing Status Network L2 smart contracts

vac:sc:status-l2:2025q4-maintaining-status-l2-contracts

Maintain and improve existing Status Network L2 smart contracts as requested.

Description §

Smart contracts for Status Network L2 that have already been implemented and deployed might still need maintenance. This includes upgrading systems, fixing bugs that might be discovered after the contracts have been deployed, and implementing minor enhancements that don’t fall under specific commitments.

The Smart Contracts team commits to providing maintenance service for existing Status Network L2 smart contracts, such as:

• Karma Token
• Karma Airdrop
• Staking and reward distribution contracts

Task List §

There are no concrete tasks associated to this commitment. As requests come in, they will be addressed by our team.

Contract maintenance (recurring) §

• fully qualified name: vac:sc:status-l2:2025q4-maintaining-status-l2-contracts:maintenance
• owner: r4bbit
• status: done
• start-date: 2025/10/01
• end-date: 2025/12/31

Description §

Handle inbound maintenance requests for deployed Status L2 contracts, including bug fixes and minor enhancements.

Deliverables §

• Cyfrin/audit-2025-12-statusl2#35
• status-im/status-network-monorepo#121 fix(CI): ignore asm-keccak256 rule in RLN contract
• status-im/status-network-monorepo#118 chore: make the linter happy
• status-im/status-network-monorepo#117 feat(IRewardDistributor): introduce isPaused()
• status-im/status-network-monorepo#115 docs: clarify loss of Karma when removing distributors
• status-im/status-network-monorepo#114 fix(DeployProtocol): ensure simple Karma distributor is whitelisted
• status-im/status-network-monorepo#113 chore(InitializeKarmaTiers): update script with latest tier values
• status-im/status-network-monorepo#112 fix(StakeManager): prevent migrating to non-empty vaults
• status-im/status-network-monorepo#111 fix(KarmaAirdrop): fix potential attack that prevents account from claiming
• status-im/status-network-monorepo#109 Ensure Emergency Exit and Leave try-catch blocks work even in missing functions or wrong return types
• status-im/status-network-monorepo#105 prohibit StakeVault to migrate to a StakeVault which has left
• status-im/status-network-monorepo#104 Remove MP_APY
• status-im/status-network-monorepo#96 fix(KarmaAirdrop): ensure claiming isn’t possible during pause
• status-im/status-network-monorepo#95 refactor(MultiplierPointsMath): round MPs up when users unstake
• status-im/status-network-monorepo#93 refactor(KarmaTiers): remove unnecessary constructor
• status-im/status-network-monorepo#92 fix(Karma): don’t overslash in cases balances are < MIN_SLASH_AMOUNT
• status-im/status-network-monorepo#88 feat(StakeManager)!: introduce a per user vault limit
• status-im/status-network-monorepo#107 audit fixes
• status-im/status-network-monorepo#103 audit fixes
• status-im/status-network-monorepo#84 audit fixes
• StakeManager: Allow leave while paused
• StakeVault: Disallow migrate to self
• status-im/status-network-monorepo#89 rename onlySlasher modifier
• status-im/status-network-monorepo#85 block vault registration with incorrect owners
• fix(KarmaTiers): allow minKarma == maxKarma in tier config
• docs(README): streamline repository readme
• refactor: use forge lint over solhint
• chore: extend deploy protocol script with SimpleKarmaDistributor
• Deployed new SimpleKarmaDistributor instances for live testing
• Fixed the SimpleKarmaDistributor deployment script to initialize distributor parameters correctly