Vac 2025/10/20 §
highlights §
- P2P: Replaced OpenSSL by BoringSSL in libp2p and quic (no more runtime dependencies)
- P2P: Fixed some memory corruption issues in nim-quic
- QA: Status-go Waku functional testing continued with contact verification tests and a new timestamp format bug reported.
- QA: Waku RLN contract property-based fuzz tests and adversarial tests both progressed; new mitigation for spam attack opened.
- QA: Status-go Settings tests implementation in progress.
- QA: Nim-libp2p QUIC test plan drafted and under review. Started implementing new tests for QUIC and one issue reported.
- QA: Status desktop QA advanced Windows E2E CI setup and investigated slow login issues; multiple PRs tested and merged.
- QA: Status mobile switch CI for BrowserStack integration, expanded test coverage, and supported pre-release validation.
- ACZ: Released multi-tree and gas-checking support for prover, theoretically prover supports unlimited many user and burnt message-id rights as many user wants for TXs that exceeds maxQuota gas.
- ACZ: Multi-steward PR is on review
- WEB: Wallet connecting
- WEB: Planning depositing
- WEB: Implementing Spaces Calendar
- WEB: Adding comprehensive SEO optimization with sitemap, RSS feeds, and robots.txt
- WEB: Sending FtW book with cover letter to University of Tokyo and Keio University
- WEB: Updating farewell to westphalia A/B testing pages
vac:p2p: §
vac:p2p:ift:2025q4-nimlibp2p-maintenance:maintenance
vac:p2p:ift:2025q4-nimlibp2p-mix:stream-reuse
vac:p2p:ift:2025q4-nimlibp2p-quic:openssl-replacement
vac:p2p:ift:2025q4-nimlibp2p-quic:stabilization
vac:p2p:ift:2025q4-nimlibp2p-kad-dht:data-retrieval
admin/misc
vac:tke: §
admin
- 2 days off due to sickness
vac:tke:nomos:stress-test::review-pos-sims
- implemented probabilistic demand for transactions
vac:tke:nomos:stress-test::dyn-stake-estimation
- Keep working towards improvement of DSE specs
- Answer comments from Nomos
vac:tke:status:karma-incentives
- adapting user’s Karma dashboard on Streamlit to the new deployment of SCs
vac:tke:ift:support-to-ift-units::price-prediction
- reviewed stochastic and econometric models
- proposed a set of models
- started implementing the models and the simulation infrastructure
- Modeling task by Finance
vac:tke:ift:support-to-ift-units::dex-nescience
- revisiting DEX options for Nescience and mapping similar products live / in dev
vac:tke:ift:logos-token::logos-token-sales
- Flying tulip review and incorporation into doc
- Presentation to Jarrad
vac:tke:ift:logos-token::logos-fundraise
- presented the findings to IFT
vac:tke:ift:tokenomics-research-forum::control
- Worked on research on Opt. Control
vac:tke:ift:tokenomics-research-forum::grantico
- further preparations of the workshop for Funding the Commons @ Devconnect
vac:qa: §
status:2025q4-status-go-functional-testing:waku
waku:2025q4-rln-smart-contract-testing:property-based
waku:2025q4-rln-smart-contract-testing:security-adversarial
status:2025q4-status-go-functional-testing:settings
vac:2025q4-nim-libp2p-testing:test-plans
vac:2025q4-nim-libp2p-testing:quic
status:2025q4-status-qa-desktop:maintenance
status:2025q4-status-qa-desktop:release-testing
status:2025q4-status-qa-desktop:e2e-windows
- Configured Virtual Display Driver; e2e now functional locally on Windows; pending infra-side tweaks for CI merge
status:2025q4-status-qa-mobile:test-ci
status:2025q4-status-qa-mobile:port-tests
status:2025q4-status-qa-mobile:release-testing
- Supported mobile pre-release test day
admin/misc
vac:dst: §
vac:dst:status:2025q4-status-evaluation:chat-protocol-benchmarks-followup
- Make simple light scenario to work
- Create structure for multiple consumers when working with requests
- Created new log level for better debugging
vac:dst:waku:2025q4-waku-scaling:TWN-supports-RLN-tree
- Check how to include memberships in the RLN tree
- Check how RLN is used in waku simulator
- Check how RLNKeystore works
vac:dst:vac:2025q4-libp2p-evaluation:regression-testing
- Analysis nim-libp2p v1.14
vac:dst:ift:2025q4-dst-tooling:general-tooling
vac:dst:ift:2025q4-dst-tooling:complete-deployment-refactor
- initContainers, commands, etc. working for lightpush, filter
- Store node need a few tweaks, but near complete
vac:dst:ift:2025q4-libp2p-evaluation:mix-in-nim-libp2p-node
- Finalized work on mix integeration PR for the refactored node. The PR is ready for merging
vac:dst:ift:2025q4-libp2p-evaluation:go-libp2p-node
- Worked on running go-libp2p node alongside nim node.
- Both, nim refactored node and go-libp2p nodes are working fine in shadow (using yamux. mplex is obsolete in go-libp2p)
- Still need to finalize work on quic in go test node
- Still need to log prometheus metrics in go test node
vac:sc: §
statusl2:2025q4-audit-preparation:restructure-test-files
statusl2:2025q4-audit-preparation:organize-tests
- Abstract test files into their own files and folders
statusl2:2025q4-audit-preparation:review-documentation
- Review MathSpec.mp matches StakeManager.sol
statusl2:2025q4-pre-audit-protocol-enhancements:distributed-slashing
- Research on Slashing Race Condition solutions
statusl2:2025q4-audit-preparation:update-properties
- Document application invariant and properties
statusl2:2025q4-audit-preparation:review-documentation
- Updated and added a bunch of documentation
statusl2:2025q4-pre-audit-protocol-enhancements:convert-erc20votes-tests
- Debugged failing ERC20Votes tests in coverage mode, fixed it and landed the PR
admin/misc
- Updated Status Network contract dep to use Foundry v1.4
vac:acz: §
nes:2025q4-nescience-consulting:native_zones
ift:2025q4-de-mls-tesnet:de-mls-maintaining
- Working on updating representation of proposal and frontend part, fully removed websocket anf made code more independent PR
ift:2025q4-zerokit:ffi-rework
- Fixed the current implementation in FFI PR
- Updated the C example and added stateless mode.
- Implemented initial big-endian support based on Sylvain’s idea.
- Review changes in PR and update Nim example
ift:2025q4-rln-status-l2:shared-db
ift:2025q2-zerokit:zerokit-maintaining
ift:2025q4-rln-status-l2:more-user-support
ift:2025q3-rln-status-l2:maintaining
ift:2025q4-rln-status-l2:gascheck
ift:2025q4-de-mls-tesnet:multi-steward-rfc
- Update PR with:
- roles that can initiate the 3 types of consensus
- deterministic creation of steward list
- priority of the consensus messages
- adding identification IDs to the members
ift:2025q4-rln-status-l2:rln-public-website
ift:2025q4-discovery:draft-RFC
ift:2025q4-rln-status-l2:rln-spec-maintain
- Update RLN deployment spec with multi-tree and decentralized slashing sections.
- Propose the determining minimumKarma and maximum globalRate amounts.
- Having discussion on removing the front-running feature on decentralized slashing part.
- Update prover specs for section gas checking
nes:2025q4-nescience-consulting:multikeys
- Reviewed document.
- Finished hierarchical deterministic wallet for NSSA document and implement in Python.
nomos:2025q4-nomos-consulting:zk-consulting-nomos-1
- Reviewed KKT in attempt to prove this inequality for Nomos; KKT yielded the same necessary results.
vac:rfc: §
vac:rfc:codex:2025q3-rfc-iteration
vac:nim: §
ift:2025q4-nimble
ift:2025q4-nim-core-libs:nim-cbor-serialization
ift:2025q4-nim-core-libs:nim-confutils
vac:sec: §
ift:2025q4-awareness-program:web3-security-essentials
- Security best practices in free.technology is pending, since we are refining content.
- Updated security checklists for Authentication, 2FA, Secure Web Browsing, Email Security
- Updated Security Guidelines page
ift:2025q4-secure-signing-process-training:use-case-priority-definition
- Defined the first stage of runs, starting with Signatory Onboarding process
ift:2025q4-secure-signing-env-deployment:evaluate-detection-tools
- Started the search of some tools we can test and evaluate
ift:2025q4-treasury-continuity-plan:develop-recovery-and-emergency-protocols
- Started the development of recovery procedures and emergency protocols
ift:2025q4-treasury-continuity-plan:implement-backup-requirements
- Gap analysis in process
- Identifying deviations to backup requirements and critical vulnerabilities
ift:2025q4-cicd-security-review:status-design-reviews
- Completed review of Status Wallet security enhancements implemented after latest audit fixes
- Performed targeted penetration and fuzz testing on Status Desktop rendering and IPC
- Collaborated with the Status team and Least Authority to review resolved issues and coordinate next steps for audit validation
ift:2025q4-vulma-and-ir:incidents
- Expanded phishing detection coverage by monitoring new GitHub and X.com activity
- Conducted simulations of token-based compromise scenarios
- Worked with infra and ops teams to strengthen OAuth app and API token scopes across key repositories
ift:2025q4-vulma-and-ir:remediation-tracking
- Completed manual verification of remaining high-severity CodeQL alerts and validated implemented fixes through targeted tests
- Verified the integrity of supply-chain dependencies by matching package hashes with trusted registries
- Deployed CI safeguards to block merges introducing unverified or unsigned third-party dependencies
- Audited Dependabot auto-merge settings to ensure priority handling for critical patches and security updates
ift:2025q3-iam-operations:remove-unnecessary-users
- Workflows for Notion assets
- Configured report for DBs created and edited before 01.01.2025
ift:2025q4-finance-automation-enhancements
- Finalized user interactive workflow version with date selection
ift:2025q4-Create hierarchy boards in Miro
- Fixed graphical issues with text inside shapes
- Generated boards for other teams
ift:2025q4-Migrate Sec workflows to n8n Sec Cloud
- Migrated workflows related to Sec work
- IAM related
- Newsletter related
- Wallet related
- Migrated credentials related to Sec work
vac:nes: §
state-separation-architecture-poc:cpc
- Finished working on specs for AMM.
- Handled comments regarding AMM specs.
state-separation-architecture-poc:fee
Others
- Started playing with the wallet, the goal is to try all commands and output a document explaining all steps.
- Had different calls with IFT regarding the project.
state-separation-architecture-poc:wallet-functionality
- Finalized token program private interactions from wallet PR
- Finalized wallet updates PR
vac:acz:nes:2025q4-nescience-consulting:multikeys
- Finished hierarchical deterministic wallet for NSSA document and implement in Python.
vac:acz:nes:2025q4-nescience-consulting:native_zones
vac:web: §
admin/misc
status:2025q4-sn-hub
ift:2025q4-psf-website
- Requesting changes to ticketing integration
ift:2025q4-logos-website
keycard:2025q4-keycard-website
- Helping to deploy copy changes in Quick Start for Shell PR#114, PR#115
2025q4-maintenance
vac:infra: §
admin/misc
- Research into missing proposals on LIDO fleet
- LIDO KAPI service conversion to Systemd definition
- New tests and improvements to LIDO fleet integration testing
- Upgrade of nodes and while nixpkgs on LIDO fleet
- Prepartion of Ethereum archive node for validator monitoring
- Follow up with Ultrasound relay about
getPayload
timeouts
- Research into ElasticSearch memory issues due to big queries
- Monitoring of Sepolia fleet during Fusaka fork
- Debugging of issues with Aztec sequencer after Sepolia fork
- Nimbus Mainnet fleet storage upgrades
- Replacement of UPS battery for local HQ backup host
- Android and iOS signing configuration for Status Desktop
- Help with last legacy Status Mobile release with backups
- Upgrade of MatterBridge fork to new Go and
status-go
versions
- Work on Nix builds for
nim-sds
dependency of status-go
- Translation files inclusion in Status Desktop mobile builds
- Status Desktop Windows E2E breakthrough, working with VVD
- Continued rollout of Jenkins job containerization
- Deployment of Commit-Boost for compairon with MEV-Boost
- Debugging of pull issues with Ansible roles management script
- Improvements to Admin Acid website deployment
- Keycard Shell website deployment setup
vac:bi: §
vac:bi:rag:2025q4-rag-evaluation-pipeline
- Extracting and the current usage of RAG.
vac:bi:rag:2025q4-rag-content
- Chunking is taking ages, stopped process and restart with only Waku’s data.
vac:bi:ift:2025q4-ift-townhall-transcript
vac:bi:ift:2025q4-ift-townhall-content-helper
- n8n pipeline to group and push all update in a repository .
- Added listing of release, blog update, forum updates.
vac:bi:ift:2025q4-vac-website-contributors
- Provide public API endpoint for the ext contributors data