Vac 2025/10/27

highlights

  • QA: Waku RLN adversarial tests (PR 42) progressed with successful Echidna overflow and exploration modes.
  • QA: Keycard wallet compatibility retested with BlueWallet.
  • QA: Nim-libp2p QUIC transport tests expanded with multiple PRs merged; coverage improvements ongoing.
  • QA: Status desktop QA upgraded to latest Squish, stabilized Windows E2E tests, and added multiple fixes.
  • QA: Status mobile QA added BrowserStack provider support and began Jenkins workflow setup for e2e CI integration.
  • DST: Found configuration blocker issue between Status and Nwaku
  • DST: Significant progress in new deployment scheme
  • DST: Implemented dst node with go-lip2p
  • P2P: quic issues fixed, ready to test
  • P2P: Added AutoTLS client spec

vac:p2p:

vac:tke:

  • vac:tke:ift:support-to-ift-units::price-prediction
    • integrated all models into the infrastructure
    • finalized the simulation infrastructure
    • handled over the work to Finance
    • Modeling inflation - task by Finance
  • vac:tke:status:karma-incentives
    • finish adapting user’s Karma dashboard on Streamlit to the new deployment of SCs
  • vac:tke:ift:tokenomics-research-forum::grantico
    • further preparations of the workshop for Funding the Commons @ Devconnect

vac:qa:

vac:dst:

  • admin/misc
    • Call with Codex regarding the usage of Codex in Status
    • nim-libp2p open maintainers call
    • Eth P2P sync
  • vac:dst:status:2025q4-status-evaluation:chat-protocol-benchmarks-followup
  • vac:dst:waku:2025q4-waku-scaling:TWN-supports-RLN-tree
    • Create anvil-deployment in K8s imitating sepolia from TWN
    • Automatize script for deploying and getting variables that are needed for running waku with RLN
    • Draft Github PR: RLN #166
  • vac:dst:ift:2025q4-dst-tooling:complete-deployment-refactor
  • vac:dst:waku:2025q4-waku-scaling:optimise-browser-bootstrapping
    • Started:
      • Changes for initContainers
      • Setup for Experiment
      • Deployment building
  • vac:dst:ift:2025q4-libp2p-evaluation:go-libp2p-node
  • vac:dst:ift:2025q4-dst-tooling:general-tooling

vac:sc:

vac:acz:

  • ift:2025q4-de-mls-tesnet:de-mls-maintaining
    • Finish remove user functioanlity PR
  • nomos:2025q4-nomos-consulting:zk-consulting-nomos-1
    • Discuss inequality proof approaches with Nomos team, and worked on proof.
  • nes:2025q4-nescience-consulting:voting
    • Prepared a specifications on governance and voting in NSSA; supports simple-voting and quadratic voting. Prepared document on modifications to Token program to handle quadratic exchange (necessary for quadratic voting).
  • nes:2025q4-nescience-consulting:wrapped_stablecoins
    • Looked into wrapped Bitcoin, and prepared a document on wrapping SNT from Ethereum to NSSA.
  • ift:2025q4-zerokit:ffi-rework
    • WIP in PR
    • FFI rework discussion meeting on Wednesday.
    • Added endian support functions in ffi2 and extended type support.
    • Improved ffi2 APIs parameters for easier initialization; updated C and Nim examples accordingly, and added a new serialization/deserialization example.
    • Refactored ffi2 module and ffi2 unit test files.
    • Initial version of ffi2 in rln-wasm.
    • Did code review for PR
    • Discussed how FFI and Public API should look like summary
  • ift:2025q4-rln-status-l2:maintaining
  • ift:2025q4-rln-spec-final
    • Read / comments / udpate the prover spec in Notion - WIP
  • ift:2025q4-zerokit:zerokit-maintaining
  • ift:2025q4-discovery:draft-RFC
    • Addressed feedbacks in the Notion doc for the draft RFC of logos discovery capability
    • Restructured the doc and made things clearer (added some sections and removed some that were repetations).
    • Added proper descritions to all the algorithms for advertisers, discoverers and registrars.
    • Improved descriptions for all the system parameters and variables in the algorithms
    • Added analysis on attack prevention and how implementations can vary system parameters to prevent it.
    • Worked on basic data structures for the POC
  • ift:2025q4-de-mls-tesnet:multi-steward-rfc
    • Address feedbacks PR
    • Did review for PR
  • ift:2025q4-rln-status-l2:rln-public-website
  • ift:2025q4-rln-status-l2:rln-spec-final

vac:rfc:

vac:nim:

vac:sec:

  • ift:2025q4-awareness-program:web3-security-essentials
    • Finished updating security checklist and new content
  • ift:2025q4-secure-signing-process-training:signatory-onboarding-run
    • Distributed process and defined schedule
  • ift:2025q4-treasury-continuity-plan:implement-backup-requirements
    • Finished gap analysis and risk assessment
  • ift:2025q4-secure-signing-env-deployment:build-a-secure-vm-for signing
    • Worked on an initial vm setup and tools
  • ift:2025q4-cicd-security-review:status-design-reviews
    • Completed a focused red-team style review on the patched IPC communication flow to test for potential privilege escalation and data exposure
    • Analyzed newly introduced third-party library updates post-audit for possible cryptographic or memory safety regressions
    • Validated code signing and attestation logs for the latest builds, ensuring compliance and integrity of distributed artifacts
    • Reviewed and approved GitHub token creation requests, confirming appropriate scopes, permissions, and secure usage before deployment
  • ift:2025q4-vulma-and-ir:incidents
    • Conducted a tabletop exercise to test the updated incident response playbook covering token compromise and data leakage scenarios
  • ift:2025q4-vulma-and-ir:remediation-tracking
    • Completed validation of remaining CodeQL findings across top repositories and confirmed patch effectiveness
    • Assessed and patched dependencies impacted by recent CVEs in network and cryptographic components
  • ift:2025q4-iam-operations: Notion clean-up
    • Configured Discord report for pages of DBs created after 01.01.2025, but last edited before
    • Send out emails or Discord with request to confirm deletion
  • ift:2025q4-finance-automation-enhancements
    • Daily monitor of Finance executions
    • Applied fix to bank data synch
      • Increased number of updated and decreased no of errors
      • Added email notification to Finance with the errors
  • ift:2025q4-Create hierarchy boards in Miro
    • New boards for EcoDEV, Nomos, Vac
    • Identified issues with Miro limits for Nomos and Vac
  • ift:2025q4-Migrate Sec workflows to n8n Sec Cloud
    • Finalized migrations of Credentials and Sec related workflows
  • ift:2025q4-iam-operations:admin-audit
    • Tested workflows for admin audit for different platforms

vac:nes:

  • state-separation-architecture-poc:zones
    • Started investigating Nomos to understand zones and try to figure out how to position NSSA.
    • Drafted a document about the zkzkEVM approach and included a detailed comparison with NSSA.
  • state-separation-architecture-poc:ux-wallet
    • Finalized various wallet-connected PRs 124, 127, 137, 140.
    • Started working on CLI refactor PR 141
  • vac:nes:2025q4:state-separation-architecture-poc:seq-testing
  • vac:nes:2025q4:state-separation-architecture-poc:fee
    • Reviewed fee mechanism docs
  • vac:nes:2025q4:state-separation-architecture-poc:sequencer
    • Started to work on node state recovery from stored blocks (task and draft).
  • Other
  • vac:acz:nes:2025q4-nescience-consulting:voting
    • Prepared a specifications on governance and voting in NSSA; supports simple-voting and quadratic voting. Prepared document on modifications to Token program to handle quadratic exchange (necessary for quadratic voting).
  • vac:acz:nes:2025q4-nescience-consulting:wrapped_stablecoins
    • Looked into wrapped Bitcoin, and prepared a document on wrapping SNT from Ethereum to NSSA.

vac:web:

vac:infra:

  • LIDO Fleet
    • Investigation of missed proposals
    • Nixpkgs upgrade applied to all hosts
    • Debugging of attestation delays, Nethermind resync
    • Debugging of memory issues caused by Keys API
    • Research into LokiJS log querying performance
    • Improvements to Random alerts generation
    • Curated Module v2 discussion and form submission
  • Imprveroments to stability of Windows E2E tests
  • Finishing containerization of Jenkins CI jobs
  • Researching Commit-Boost as replacement for MEV-Boost
  • Researching proposal commitments to boost profits
  • Helping with “last” legacy mobile release with backups
  • Created working signed iOS release in TestFlight
  • Upgraded Go and status-go in MatterBridge fork, testing
  • Debugging of Status fleet Websocket issues and abuse
  • Configuration of nim-sds builds for status-go
  • Windows Wireguard refresh script interpreter fix
  • Backup and restore docs for Aptly and Keycard Shell
  • Prometheus uprade to 3.5.0 on all fleets
  • Mix protocol enabled on waku.test fleet
  • Preparations of Nimbus fleet for Fusaka fork on Hoodi
  • Fixed Portal Bridge build failures due to low RAM
  • Improvements to Keycard Shell website

vac:bi: