Vac 2025/04/08 §

highlights §

• QA: Added new onboarding tests for Status critical flows, including backup/restore and account creation.
• QA: Completed testing of multi-chain wallets in Keycard Shell.
• QA: Enhanced WakuCannary tests, identified protocol and connection issues.
• QA: Continued memory leak analysis for 12h Waku Go Bindings tests.
• QA: Merged multiple GossipSub performance test scenarios in nim-libp2p.
• QA: Improved Status Desktop tests, investigated build performance issues.
• SC: KarmaTier contract deployment for testing
• SC: Lots of learning from research via security audit contest
• NES: Concluded Sprint 1 with one week in advance and kicked off Sprint 2.
• NES: Finished working on zkVMs and choosed the best fit for NSSA.
• NES: Defined public and private state for NSSA.
• NES: Made progress on the sequncer.

vac:p2p: §

• ift:2025q3-gossipsub-perf-improvements
  • Finalized gossipsub improvements comparisons blogpost.
  • Presented gossipsub improvements work in IFT research call
  • Spent some time nin reading discussions around DAS
• vac:p2p:ift:2025q3-nimlibp2p-mix:mix-core
  • vacp2p/mix#68 feat: add single-use reply block (SURB) functionality
  • vacp2p/mix#69 feat: add support for circuit relay multiaddresses and fixes quic multiaddresses
  • vacp2p/mix#70 refactor: remove entry_connection_callbacks and gossipsub related procs
• vac:p2p:ift:2025q3-nimlibp2p-maintenance
  • Fix docs generation
  • Fix interop failing due to redis not being found
  • Finish removing nim 1.6 support
  • Compile Nimbus on daily CI
  • documented nimble 0.20.1 req in PR
• vac:p2p:ift:2025q3-nimlibp2p-universal-connectivity-app
  • UI and CLI
• vac:p2p:ift:2025q3-nimlibp2p-kad-dht:bootstraping-and-lookup
  • Merged feat(kat-dht: find nodes) PR
  • Follow-up timeout config PR
  • Initial sketch of put-val in draft PR
• vac:p2p:ift:2025q3-nimlibp2p-kad-dht:data-storage
  • progressed on putval. Progress is slowed down somewhat due to confounding compiler errors.
• misc/admin
  • Refine kad-dht roadmap
  • Assist in queries / reviews
  • Interview 1 candidate for DST
  • Update ownership of RLN v2 Contracts for Waku
  • OOO: 2 cc days

vac:tke: §

• admin
  • 1 CC day off (Monday)
  • wrote down monthly report of deliverables
• vac:tke:nomos:stress-test::review-block-rewards
  • adapted the specs with the latest decisions
  • inserted our Python codes into the Nomos specs
  • Reviewed Block rewards docs
• vac:tke:nomos:stress-test::review-blockspace
  • reviewed the blockspace work
  • Improved blockspace doc
  • Met with Thomas, Marcin, and Frederico to discuss improvements to blockspace doc
• vac:tke:nomos:stress-test::review-nomos-da
  • reviewed the NomosDA work
  • Joined research meeting
• vac:tke:ift:logos-token:unified-model
  • reviewed other’s work
  • Finished work towards ecosystem and unification research
  • Met with Jarrad on Wednesday, ideally to coordinate before that
  • Sent Loom to Jarrad describing doc above
• vac:tke:status:karma-incentives::karma-tiers
  • started reviewing the whole work
• vac:tke:ift:logos-token:redemption-window
  • streamlit dashboard to simulate sub-token creation under different mechanisms
• vac:tke:status:karma-incentives:karma-streamlit
  • streamlit dashboard for Karma tiers
• vac:tke:status:cf
  • Helped out with some questions CF dev team had regardin tokenomics
• vac:tke:ift:tokenomics-research-forum::grantico
  • continuing work in spare time
• vac:tke:ift:tokenomics-research-forum::control
  • Keep pushing reserch on Control Problem

vac:qa: §

• status:2025q3-status-go-functional-testing:critical-flows
  • test_: backup mnemonic and restore account
  • test_: add account
  • Investigate wallet related flows
• keycard:2025q3-keycard-testing:shell-multichain-wallets
  • Second batch - multi chain wallets, testing finished with results - re-test if requested from the team.
• waku:2025q3-interop-testing:wakucannary
  • PR 130 created and basic script-protocols-websockets tests added
  • Found 2 issues: 1) no error when not using shard&luster although dialing failed, 2) cannot find remote node with wss port
  • PR created in nwaku repo with test scripts and updated README with correct commands as agreed with Ivan
• waku:2025q3-interop-testing:12hlongevity
  • Analyze latest job and found memory check step should be moved earlier for better detection of leaks
  • Analyze failing tests after 13h job
  • On hold as Ivan will finalize issues soon
• vac:2025q3-nim-libp2p-testing:gossipsub-performance
  • test(gossipsub): Performance tests - base scenario and runner - merged
  • test(gossipsub): Performance tests - aggregation script and workflow - merged
  • test(gossipsub): Performance tests - more scenarios - merged
  • test(gossipsub): Performance tests - docker stats - in progress
• status:2025q3-status-qa-desktop:maintenance
  • PR 18445
  • Investigated keypair renaming test issue, found root cause, opened task to fix framework issue
  • Fixed filenames causing Jenkins warnings PR 18470
  • Started working on Issue 18415
• status:2025q3-status-qa-desktop:release-testing
  • Windows build performance checks
  • Opened Issue 18458
  • Tested PR 18308 and committed fixes
  • Opened Issue 18471
  • Investigated macOS build runtime issues (40–60 min)
  • Assisted devops with tests and debugging
• admin
  • Job description review and updates
• admin/misc
  • OOO: 5 cc Days

vac:dst: §

• admin/misc
  • 1 CC OOO Monday 28th and Tuesday 29th
  • Review Github PR
  • Call with new CC for explaining 10ksim workflow
  • Started cleaning Grafana dashboards, run into some variable issues
• vac:dst:ift:2025q3-dst-research-destination:ethereum-foundation
  • Add comparisons of Shadow and Kurtosis. Testground still missing.
  • Add Farooq, and some links with his work
  • Answered some doc comments
  • Proposed next meeting for refine the cope of the proposal
• vac:dst:vac:2025q3-libp2p-evaluation:regression-testing
  • Regression for nim-libp2p 1.12
    • Found weird bandwidth patterns, checking that
    • Quic still unstable, but looks like its not related to node logs, checking that
  • Started second Mix analysis
  • Prepare report
• vac:dst:waku:2025q3-waku-evaluation:discv5-feasibility-comparison
  • Notion: Notes
  • Findings:
    • We should probably be looking at totals instead of just averages for Discv5 (and other stats)
    • Total Discv5 is not too high
• vac:dst:waku:2025q3-waku-evaluation:store-dial-failure-followup
  • Confirmed 93 nodes minimum to reproduce. Doesn’t occur with 90 nodes.
  • Added map to custom/debug store_msg_receiver to map NodeIds

vac:sc: §

• admin/misc
  • Found zombie code in StakeVault: Trust Stake Manager is not needed anymore because the funds are locked even after an upgrade. https://github.com/vacp2p/staking-reward-streamer/issues/234
    • Refactor of StakeVault: Removed obsolete logic https://github.com/vacp2p/staking-reward-streamer/pull/237
  • Found overcomplexity on StakeManager <-> StakeVault coupling: github.com/vacp2p/staking-reward-streamer/issues/238
  • Improve coverage of staking-reward-streamer project folder
  • Researched reorg attacks
  • Research lending protocol vulnerabilities
• ift:2025q3-security-audits
  • Audited Pike/Tapio protocol
  • Researched lending protocols
• status:2025q2-karma-rln:karma-tiers
  • Deployed a version of Karma tiers contract

vac:acz: §

• ift:2025q3-zerokit:big-endian-support
  • Prepared draft API with big endian support for rln module: PR
  • Moved identity generation functions and hash into separate module : PR
  • Reviewed this PR.
• ift:2025q3-zerokit:ci-revising
  • Resolved PR comments and merged this PR, completed task.
• ift:2025q3-zerokit:rln-wasm-maintaining
  • Resolved PR comments and merged this PR, completed task.
  • Also resolved PR comments and merged this PR for new minor version of pmtree crate.
• ift:2025q3-zerokit:merkle-tree-revising
  • Resolved PR comments and this PR about overlaping stateless and merkletree feature.
• ift:2025q3-rln-status-l2:sc-testing
  • Reviewed the system overview to understand how to interact with all the smart contracts.
  • Discussed with 0x_r4bbit on Discord how to claim and stake STT, mint Karma, and gain testing permissions for the smart contracts.
  • Wrote 3 test scripts in this PR to interact with the Karma, KarmaTiers, and KarmaRLN smart contracts and fixed the prover so it can connect to the testnet and interact with these smart contracts.
• ift:2025q3-zerokit:zerokit-maintaining
  • Reviewed external PR for Contribution guide
  • Reviewed PR
  • Reviewed PR
  • Reviewed PR
• ift:2025q3-rln-status-l2:e2e-prover-testing
  • Read some examples from Alloy crate to implement SC unit testing (using Mock): https://github.com/alloy-rs/examples and article
  • SC unit testing PR - merged
  • Report bug on Alloy github repository
• admin/misc
  • 1 cc is ooo for whole week

vac:rfc: §

• vac:rfc:waku:2025q3-rfc-iteration:qaku
  • Worked on first draft PR, asked for feedback - https://github.com/waku-org/specs/pull/77
• vac:rfc:waku:2025q3-rfc-iteration:rln-keystore
  • Completed the update - https://github.com/waku-org/specs/pull/78
• vac:rfc:nomos:2025q3-rfc-iteration:mantle-digital-signature
  • Should complete within the next week - https://github.com/vacp2p/rfc-index/pull/167
• vac:rfc:nomos:2025q3-rfc-iteration:p2p-network-specification
  • Added a draft PR: https://github.com/vacp2p/rfc-index/pull/169

vac:sec: §

• ift:2025q3-wallet-policy-update:write-and-review-new-version
  • Drafted new runbook for adding new signatory wallets (pending review)
• ift:2025q3-awareness-program:web3-security-essentials
  • Prepared web3 education material to be shared across the org (1st wave: Finance and POps)
• ift:2025q3-multisig-secondary-interface-deployment:evaluate-potential-alternatives
  • Continued testing Onchain Den
• ift:2025q3-cicd-security-review:status-design-reviews
  • Completed browser package and wallet security review (Status-doc)
  • Conducted wallet architecture and design review discussion with Status team
• ift:2025q3-vulma-and-ir:incidents
  • Followed up on the recent SNT phishing attempt; gathered initial evidence
  • Finalized and shared Keycard post-mortem documentation
  • Completed and distributed updated IR process documentation
• ift:2025q3-finance-automation
  • Fixed issues with Expensify PO process
  • Mass PO monthly compensation dev workflow finalized
• ift:2025q3-iam-operations:remove-unnecessary-users
  • Started extracting audit for admin actions from systems
  • Continued workflows for identifying, verifying and removing access for leavers from systems

vac:nes: §

• vac:nes:2025q3:state-separation-architecture-poc:specs

  • Worked on NSSA v.01 specs doc.
  • Worked on other research tasks such as key protocol, encryption in R0, solving R0 challenges, etc,. Details in our daily updates.
  • Started a draft on the sequencer specs.
  • Finished concrete specs document for key protocols.

• state-separation-architecture-poc:seq-stability

  • Finished native token transfers PR.
  • Finished integration tests PR.
  • Finished mechanism against replay attacks for public native transfers(task and PR).

vac:nim: §

• ift:2025q3-nimble
  • Normalizes requirements https://github.com/nim-lang/nimble/pull/1439
    • Normalizes requirements
    • normalize should also take alias into account
  • Dont rerun when the declarative parser fails and we are in nimSelection pass. https://github.com/nim-lang/nimble/pull/1437
    • Dont rerun when the declarative parser fails and we are in nimSelection pass.
  • Fixes an issue where using url requires with special versions, sometimes ended with duplicate packages in the solved set (latest commit: 2025-07-30 09:35:10) https://github.com/nim-lang/nimble/pull/1436
    • Fixes an issue where using url requires with special versions, sometimes ended with duplicate packages in the solved set
    • reenables test
  • Fixes an issue where special versions wanst being saved on new installs, so they needed to be reinstalled. https://github.com/nim-lang/nimble/pull/1435
    • Fixes an issue where special versions wanst being saved on new installs, so they needed to be reinstalled.
    • adds missing line
  • Adds an additional sat pass to hard require the current system Nim. https://github.com/nim-lang/nimble/pull/1433
    • Adds an additional sat pass to hard require the current system Nim.
  • Troubleshot Status CI issues