Vac R&D Roadmaps and Reports

Search

SearchSearch

2025-10-13 Vac weekly

Oct 13, 2025, 8 min read

Vac 2025/10/13

highlights

  • QA: Status-go functional testing progressed with new community chat tests.
  • QA: Waku RLN contract property-based fuzz tests refined; adversarial security tests in progress.
  • QA: Nim-libp2p Gossipsub performance PRs merged; new test plan work for QUIC begun.
  • QA: Status desktop QA continued across maintenance, Windows CI, and backup tasks with multiple PRs merged.
  • QA: Status mobile QA improved CI workflows, added x86_64 support, and expanded password change and test coverage.
  • DST: Confirmed issues in Mix exit nodes.
  • SC: Redeployment of Karma and staking system.
  • ACZ: Shared a nim test for Zerokit FFI support.
  • ACZ: Conduct IFT ZK call on verifiable credentials topic.
  • ACZ: Released improvement on de-mls repo
  • ACZ: Released initial discovery mechanism named Disc-ng functionality on kad-dht
  • Web: Integrating depositing by Aragon team https://github.com/status-im/status-web/issues/775
  • Web: Streamlining ticketing integration
  • Web: Implementing A/B testing for /farewell-to-westphalia page https://github.com/acid-info/logos.co/pull/85
  • Web: Using BI’s team GitHub data

vac:p2p:

  • vac:p2p:ift:2025q4-nimlibp2p-quic:openssl-replacement
    • vacp2p/nim-ngtcp2#21 feat: replace picotls by aws-lc.
    • vacp2p/nim-quic#140 feat: use aws-lc
    • Both of the previous PRs can’t be merged yet, as nim-libp2p still uses openssl for generating the certificates
    • Attempted to extract aws-lc into a separate repository, however, while attempting to use this repo as a dependency of nim-ngtcp2, some compilation errors appear due to missing libraries
  • vac:p2p:ift:2025q4-nimlibp2p-mix:stream-reuse Add additional logs to determine why are exit nodes running out of outgoing slots
  • vac:p2p:ift:2025q4-nimlibp2p-maintenance:maintenance
    • vacp2p/nim-libp2p#1751: release v1.14.0
    • chore(quic): better error handling nim-libp2p#1747
    • Spent monday trying to get rid of bearssl_pkey_decoder but since bearssl won’t take a PR and we won’t move away from bearssl and we won’t import unrelated code into nim-libp2p, we’re stuck with that dependency
    • chore(interop): update autonatv2 go-peer deps nim-libp2p#1745
  • vac:p2p:ift:2025q4-nimlibp2p-quic:stabilization
  • vac:p2p:ift:2025q4-nimlibp2p-kad-dht:network-maintenance-node-management
  • vac:p2p:ift:2025q4-nimlibp2p-kad-dht:data-retrieval

vac:tke:

vac:qa:

vac:dst:

  • admin/misc
    • 1 CC OOO days
    • Calls about Mix, Waku, P2P lab setup, ETH P2P sync, VAC research
      • Also some simulations for Mix
    • Discuss future tasks for Nomos, Js-Waku
  • vac:dst:ift:2025q3-dst-research-destination:forum-post (recurrent)
    • Create forum post with summary deliverables: Post
  • vac:dst:ift:2025q3-dst-research-destination:public-reports (recurrent)
    • Revisit reports and results summary page
  • vac:dst:status:2025q4-status-evaluation:chat-protocol-benchmarks-followup
    • Expanded async utils
    • Faced issue with nWaku and Status
      • Failed to decode message push on lightpush
    • Working on light nodes scenarios
      • Scenario of Lightpush-client -> Lightpush-server -> filter-client was not working, but it should
  • vac:dst:ift:2025q4-dst-tooling:general-tooling
  • vac:dst:ift:2025q4-libp2p-evaluation:mix-in-nim-libp2p-node
  • vac:dst:ift:2025q3-dst-tooling:nim-libp2p-dst-node-refactor
  • vac:dst:ift:2025q4-libp2p-evaluation:go-libp2p-node
    • Looked into running go-libp2p node alongside nim node.

vac:sc:

vac:acz:

  • nes:2025q4-nescience-consulting:consensus-survey
  • nes:2025q4-nescience-consulting:multikeys
    • Began hierarchical deterministic wallet for NSSA document so that a single seed can general multiple keys.
  • ift:2025q4-ift-zk-calls:ift-zk-call-1
    • Lead zk call and post corresponding forum post. As well as joined in a discussion on the forum post.
  • ift:2025q3-libp2p-mix-testnet:update-rfc
    • Finalized Section 8: Packet Construction and Handling, opened PR #202
    • Responded to review comments on PR #194
  • ift:2025q3-libp2p-mix-testnet:unexpected-latency
    • Participated in benchmarks sync call
    • Helped define clear next steps and timelines for latency benchmarks
  • ift:2025q4-de-mls-tesnet:de-mls-maintaining
    • Working on preparation for multi-steward. Separate group creation from user, started to make steward role changable, move from websoket based ui to rust based
  • ift:2025q4-rln-status-l2:maintaining
    • Reviewed the Decentralized Slashing PR in monorepo.
  • ift:2025q4-zerokit:zerokit-maintaining
    • Reviewed PR and found an upstream bug from nightly rustc.
    • Support nwaku team regarding updating zerokit version and using in waku-rust-bindings
    • Discussed changes in zerokit for prover
  • ift:2025q4-rln-status-l2:more-user-support
  • ift:2025q4-zerokit:ffi-rework
    • Finished the first version of FFI2 with unit tests and C examples PR
    • Refactored the FFI2 interface to align with Nim and fixed the Nim example error.
    • Start reviewing FFI rework PR
    • Reviewed ffi PR
    • Implemented an example on Nim for FFI, discovered some minor issues when exporting functions. PR
  • ift:2025q4-discovery:draft-RFC
  • ift:2025q4-de-mls-tesnet:multi-steward-rfc
    • Refined PR, now its open to review. Extracted few items as open questions or require clarifications.
  • ift:2025q4-rln-status-l2:rln-spec-maintain
    • Work on new Zerokit feature and presented to the discussion
    • Came across a research that may be used on signature-like-rln and inits a discussion about it
    • Addressed questions from SC team about decentralized slashing
  • nes:2025q4-nescience-consulting:account-security
    • Finish to review document on NSSAv0.1 security and cryptographic assumptions.
  • admin/misc
    • Began examining a Nomos question on how to prove a specific inequality, and asked for clarification concerning the work Alexander has already done.
    • Discussed the impracticalness of using a new proposal for RLN.
    • Discussed zerokit support for the nwaku repo
    • 1 cc was ooo for 3 days
    • 1 cc was ooo for a day

vac:rfc:

vac:nim:

vac:sec:

  • ift:2025q4-continuity-plan:write-guides-and-best-practices
    • Finished Operational Continuity guidelines based on Threat Model
  • ift:2025q4-training-and-awareness-program:secure-the-signing-process
    • Tested the multi-layer verification mechanisms in the Signing Process (Dummy Data)
  • ift:2025q4-cicd-security-review:status-design-reviews
    • Completed final validation of audit fix documentation and verified that all related PRs were properly merged
    • Performed targeted security regression testing across patched Status Desktop and Wallet components to confirm no re-introduced issues
    • Audited CI/CD signing and artifact verification workflows, confirming integrity and authenticity of recent builds
  • ift:2025q4-vulma-and-ir:incidents
    • Monitored and analyzed new phishing attempts linked to GitHub Pages and X.com activity; no active threats detected
    • Conducted detailed forensic analysis on phishing-related logs to establish attacker patterns and indicators of compromise
    • Began drafting updated IR playbook entries covering phishing response and token compromise procedures
  • ift:2025q4-vulma-and-ir:remediation-tracking
    • Verified dependency patch merges through code review and confirmed build stability post-deployment
    • Prioritized and tracked remediation of outstanding high-risk CodeQL findings with repository maintainers
    • Assessed exposure to newly published CVEs affecting crypto and network dependencies
    • Tuned CI alert severity configurations to better prioritize critical vulnerabilities in dependency updates
  • admin/misc
    • Reviewed 4Q commitments and discussed future work with SU
    • Worked on Hackenproof subscription renewal and processed payment extension

vac:nes:

  • state-separation-architecture-poc:cpc

  • state-separation-architecture-poc:fee

    • Looked into consensus protocols and fee mechanisms (what other privacy projects use and feeless mechanism).

  • state-separation-architecture-poc:wallet-functionality

    • Finalized PR 122 on pinata private claims.
    • Started PR 124 on private token program interactions.

  • state-separation-architecture-poc:nondet-prog

    • Created two PRs regarding non-determinism
      • Build script PR to use cargo risczero build for our guest programs.
      • Wall command PR to check IDs match those used by the node.

  • state-separation-architecture-poc:specsv2.0

  • state-separation-architecture-poc:prog-deployment

    • Define how users deploy programs in NSSA.

vac:web:

vac:infra:

vac:bi:

vac:bi:rag:2025q3-rag-evaluation-pipeline: Improving the monitoring of the RAG usage to help listing recurrent query for evaluation

  • vac:bi:rag:2025q4-rag-content: meeting with Nenad to see if the RAG could be use for Discord.
  • vac:bi:logos:2025q4-logos-winnable-stories-sm-accounts:
    • Analysis of Twitter follower to find interesting account to follow. Stuck due to Twitter API limitation
    • Analysis of Twitter account list given by Logos Mouvement team.
  • Automatisation of Airbyte config backup using custom tooling
  • vac:bi:ift:2025q4-ift-townhall-content-helper Start working on the tasks
  • vac:bi:comm:2025q4-comm-x-spaces-analytics Finished tasks
  • vac:bi:ift:2025q4-ift-townhall-transcript continue task and documentation

Graph View

Backlinks

  • No backlinks found