Vac 2025/10/20

highlights

  • P2P: Replaced OpenSSL by BoringSSL in libp2p and quic (no more runtime dependencies)
  • P2P: Fixed some memory corruption issues in nim-quic
  • QA: Status-go Waku functional testing continued with contact verification tests and a new timestamp format bug reported.
  • QA: Waku RLN contract property-based fuzz tests and adversarial tests both progressed; new mitigation for spam attack opened.
  • QA: Status-go Settings tests implementation in progress.
  • QA: Nim-libp2p QUIC test plan drafted and under review. Started implementing new tests for QUIC and one issue reported.
  • QA: Status desktop QA advanced Windows E2E CI setup and investigated slow login issues; multiple PRs tested and merged.
  • QA: Status mobile switch CI for BrowserStack integration, expanded test coverage, and supported pre-release validation.
  • ACZ: Released multi-tree and gas-checking support for prover, theoretically prover supports unlimited many user and burnt message-id rights as many user wants for TXs that exceeds maxQuota gas.
  • ACZ: Multi-steward PR is on review
  • WEB: Wallet connecting
  • WEB: Planning depositing
  • WEB: Implementing Spaces Calendar
  • WEB: Adding comprehensive SEO optimization with sitemap, RSS feeds, and robots.txt
  • WEB: Sending FtW book with cover letter to University of Tokyo and Keio University
  • WEB: Updating farewell to westphalia A/B testing pages

vac:p2p:

vac:tke:

  • admin
    • 2 days off due to sickness
  • vac:tke:nomos:stress-test::review-pos-sims
    • implemented probabilistic demand for transactions
  • vac:tke:nomos:stress-test::dyn-stake-estimation
    • Keep working towards improvement of DSE specs
    • Answer comments from Nomos
  • vac:tke:status:karma-incentives
    • adapting user’s Karma dashboard on Streamlit to the new deployment of SCs
  • vac:tke:ift:support-to-ift-units::price-prediction
    • reviewed stochastic and econometric models
    • proposed a set of models
    • started implementing the models and the simulation infrastructure
    • Modeling task by Finance
  • vac:tke:ift:support-to-ift-units::dex-nescience
    • revisiting DEX options for Nescience and mapping similar products live / in dev
  • vac:tke:ift:logos-token::logos-token-sales
    • Flying tulip review and incorporation into doc
    • Presentation to Jarrad
  • vac:tke:ift:logos-token::logos-fundraise
    • presented the findings to IFT
  • vac:tke:ift:tokenomics-research-forum::control
    • Worked on research on Opt. Control
  • vac:tke:ift:tokenomics-research-forum::grantico
    • further preparations of the workshop for Funding the Commons @ Devconnect

vac:qa:

vac:dst:

vac:sc:

vac:acz:

  • nes:2025q4-nescience-consulting:native_zones
  • ift:2025q4-de-mls-tesnet:de-mls-maintaining
    • Working on updating representation of proposal and frontend part, fully removed websocket anf made code more independent PR
  • ift:2025q4-zerokit:ffi-rework
    • Fixed the current implementation in FFI PR
    • Updated the C example and added stateless mode.
    • Implemented initial big-endian support based on Sylvain’s idea.
    • Review changes in PR and update Nim example
  • ift:2025q4-rln-status-l2:shared-db
  • ift:2025q2-zerokit:zerokit-maintaining
    • Review 1
    • Minor doc PR
    • Supported nwaku team with zerokit version bumping
    • Made a summary about changes in zerokit for prover in discord
  • ift:2025q4-rln-status-l2:more-user-support
  • ift:2025q3-rln-status-l2:maintaining
  • ift:2025q4-rln-status-l2:gascheck
  • ift:2025q4-de-mls-tesnet:multi-steward-rfc
    • Update PR with:
      • roles that can initiate the 3 types of consensus
      • deterministic creation of steward list
      • priority of the consensus messages
      • adding identification IDs to the members
  • ift:2025q4-rln-status-l2:rln-public-website
  • ift:2025q4-discovery:draft-RFC
  • ift:2025q4-rln-status-l2:rln-spec-maintain
    • Update RLN deployment spec with multi-tree and decentralized slashing sections.
    • Propose the determining minimumKarma and maximum globalRate amounts.
    • Having discussion on removing the front-running feature on decentralized slashing part.
    • Update prover specs for section gas checking
  • nes:2025q4-nescience-consulting:multikeys
    • Reviewed document.
    • Finished hierarchical deterministic wallet for NSSA document and implement in Python.
  • nomos:2025q4-nomos-consulting:zk-consulting-nomos-1
    • Reviewed KKT in attempt to prove this inequality for Nomos; KKT yielded the same necessary results.

vac:rfc:

vac:nim:

vac:sec:

  • ift:2025q4-awareness-program:web3-security-essentials
    • Security best practices in free.technology is pending, since we are refining content.
    • Updated security checklists for Authentication, 2FA, Secure Web Browsing, Email Security
    • Updated Security Guidelines page
  • ift:2025q4-secure-signing-process-training:use-case-priority-definition
    • Defined the first stage of runs, starting with Signatory Onboarding process
  • ift:2025q4-secure-signing-env-deployment:evaluate-detection-tools
    • Started the search of some tools we can test and evaluate
  • ift:2025q4-treasury-continuity-plan:develop-recovery-and-emergency-protocols
    • Started the development of recovery procedures and emergency protocols
  • ift:2025q4-treasury-continuity-plan:implement-backup-requirements
    • Gap analysis in process
      • Identifying deviations to backup requirements and critical vulnerabilities
  • ift:2025q4-cicd-security-review:status-design-reviews
    • Completed review of Status Wallet security enhancements implemented after latest audit fixes
    • Performed targeted penetration and fuzz testing on Status Desktop rendering and IPC
    • Collaborated with the Status team and Least Authority to review resolved issues and coordinate next steps for audit validation
  • ift:2025q4-vulma-and-ir:incidents
    • Expanded phishing detection coverage by monitoring new GitHub and X.com activity
    • Conducted simulations of token-based compromise scenarios
    • Worked with infra and ops teams to strengthen OAuth app and API token scopes across key repositories
  • ift:2025q4-vulma-and-ir:remediation-tracking
    • Completed manual verification of remaining high-severity CodeQL alerts and validated implemented fixes through targeted tests
    • Verified the integrity of supply-chain dependencies by matching package hashes with trusted registries
    • Deployed CI safeguards to block merges introducing unverified or unsigned third-party dependencies
    • Audited Dependabot auto-merge settings to ensure priority handling for critical patches and security updates
  • ift:2025q3-iam-operations:remove-unnecessary-users
    • Workflows for Notion assets
      • Configured report for DBs created and edited before 01.01.2025
  • ift:2025q4-finance-automation-enhancements
    • Finalized user interactive workflow version with date selection
  • ift:2025q4-Create hierarchy boards in Miro
    • Fixed graphical issues with text inside shapes
    • Generated boards for other teams
  • ift:2025q4-Migrate Sec workflows to n8n Sec Cloud
    • Migrated workflows related to Sec work
      • IAM related
      • Newsletter related
      • Wallet related
    • Migrated credentials related to Sec work
      • Notion
      • Discord
      • GitHub

vac:nes:

  • state-separation-architecture-poc:cpc
    • Finished working on specs for AMM.
    • Handled comments regarding AMM specs.
  • state-separation-architecture-poc:fee
  • Others
    • Started playing with the wallet, the goal is to try all commands and output a document explaining all steps.
    • Had different calls with IFT regarding the project.
  • state-separation-architecture-poc:wallet-functionality
    • Finalized token program private interactions from wallet PR
    • Finalized wallet updates PR
  • vac:acz:nes:2025q4-nescience-consulting:multikeys
    • Finished hierarchical deterministic wallet for NSSA document and implement in Python.
  • vac:acz:nes:2025q4-nescience-consulting:native_zones

vac:web:

vac:infra:

  • admin/misc
    • Research into missing proposals on LIDO fleet
    • LIDO KAPI service conversion to Systemd definition
    • New tests and improvements to LIDO fleet integration testing
    • Upgrade of nodes and while nixpkgs on LIDO fleet
    • Prepartion of Ethereum archive node for validator monitoring
    • Follow up with Ultrasound relay about getPayload timeouts
    • Research into ElasticSearch memory issues due to big queries
    • Monitoring of Sepolia fleet during Fusaka fork
    • Debugging of issues with Aztec sequencer after Sepolia fork
    • Nimbus Mainnet fleet storage upgrades
    • Replacement of UPS battery for local HQ backup host
    • Android and iOS signing configuration for Status Desktop
    • Help with last legacy Status Mobile release with backups
    • Upgrade of MatterBridge fork to new Go and status-go versions
    • Work on Nix builds for nim-sds dependency of status-go
    • Translation files inclusion in Status Desktop mobile builds
    • Status Desktop Windows E2E breakthrough, working with VVD
    • Continued rollout of Jenkins job containerization
    • Deployment of Commit-Boost for compairon with MEV-Boost
    • Debugging of pull issues with Ansible roles management script
    • Improvements to Admin Acid website deployment
    • Keycard Shell website deployment setup

vac:bi:

  • vac:bi:rag:2025q4-rag-evaluation-pipeline
    • Extracting and the current usage of RAG.
  • vac:bi:rag:2025q4-rag-content
    • Chunking is taking ages, stopped process and restart with only Waku’s data.
  • vac:bi:ift:2025q4-ift-townhall-transcript
    • Work in progress
  • vac:bi:ift:2025q4-ift-townhall-content-helper
    • n8n pipeline to group and push all update in a repository .
    • Added listing of release, blog update, forum updates.
  • vac:bi:ift:2025q4-vac-website-contributors
    • Provide public API endpoint for the ext contributors data