Vac 2026/01/12 §
top highlights §
- Advanced DST Vaclab 2.0 lab deployment with new infrastructure components and updated documentation.
- Shipped multiple Nimble 1.0.0 fixes and continued core library improvements.
- Delivered SN Hub updates for TVL access, Karma UI, and vault ordering.
team highlights §
- BI: Expanded finance data extractions with BTC/Alchemy updates and refreshed reporting models.
- BI: Added Logos Circle Telegram extractions and updated forum data pipelines.
- DST: Closed chat protocol benchmark follow-up and documented new nWaku issues for Status.
- DST: Advanced Vaclab 2.0 deployment automation and published infrastructure updates.
- Infra: Strengthened CI reliability with backup/restore validation and cleanup automation.
- Infra: Continued Status app release tooling, signing, and Flatpak packaging work.
- Nim: Shipped multiple Nimble 1.0.0 fixes across SAT solver and metadata handling.
- Nim: Improved Nim core libraries with json-rpc flavors, docs tooling, and langserver updates.
- P2P: Progressed nim-libp2p maintenance with Kademlia fixes and refactors.
- P2P: Continued gossipsub extensions and c-bindings logos core groundwork.
- QA: Added RLN negative-path test coverage and advanced token-gated community tests.
- QA: Extended nim-libp2p Kad-DHT test suite with merges and reviews.
- RFC: Drafted the Bedrock anonymous leader reward RFC and advanced fork choice reviews.
- RFC: Continued rfc-index coordination and Nomos RFC iteration reviews.
- Sec: Completed security review catch-up across IFT, Status, and VAC repositories.
- Sec: Followed up on incidents and carried CodeQL/Dependabot planning into Q1.
- TKE: Advanced Logos digital twin modeling and validator behavior simulations.
- TKE: Progressed Nomos DSE stress-test work and tokenomics collaboration.
- Web: Shipped SN Hub updates for TVL access, Karma UI, and vault ordering.
- Web: Advanced translations, maintenance workflows, and wallet extension improvements.
vac:bi: §
vac:dst: §
vac:infra: §
lido
- Researched ETHGas relay error volume.
- Removed ETHGas and Interstate relays from Hoodi nodes.
- Submitted LIDO Q4 datasheet and emergency contact form.
rocketpool
- Debugged spam submissions from the oDAO node.
- Upgraded Rocketpool nodes to the latest release.
nimbus
- Improved Nimbus-eth1 benchmarking reports and added metrics.
- Added Consul alerts for Nimbus-eth1 benchmarking failures.
- Researched running benchmarks via Jenkins instead of timers.
waku
- Investigated Waku node RLN registration issues.
ci
- Wrote backup and restore docs for Gitea and Harbor.
- Performed test restores for Gitea and Harbor.
- Adjusted GitHub Comment Manager formatting for large counts.
- Ordered additional macOS hosts for Nomos GitHub Actions and Jenkins.
- Started work on building and signing Logos App POC releases.
status
- Fixed Waku library integration with
status-go; tests remain broken.
- Redirected old Logos storage and messaging project sites.
- Set up iOS and Android signing and release processes for the new app.
- Continued Flatpak packaging for Status Desktop Linux app.
- Deployed upgraded Matterbridge fork with updated
status-go.
- Adjusted Status bridge account permissions.
- Cleaned up CI from leftover
status-go test containers.
- Added automatic cleanup of those containers to jobs.
proxy
- Removed obsolete Nodefleet and Grove backend endpoints.
sites
- Fixed Navbar CORS issue on https://ecosystem.logos.co/.
- Fixed Watchtower issues with private Docker repos (Logos Press Enginer).
- Researched Discourse registration email delivery failures; no issues found.
misc
- Continued comms around the new Vac DST research Kubernetes cluster.
- Completed deployment of the CiviCRM service for Logos.
- Finished setup of the Discord UTM bot.
vac:nim: §
vac:p2p: §
vac:qa: §
vac:rfc: §
admin/misc
ift-ts:rfc:nomos:2026q1-rfc-iteration:bedrock-anonymous-leader-reward
ift-ts:rfc:nomos:2026q1-rfc-iteration
- Reviewed Fork Choice Rule and second iteration OPChan.
vac:sc: §
vac:sec: §
ift:2025q4-treasury-continuity-plan:signing-accounts-revalidation
- Continued annual revalidation of signing accounts.
ift:2026q1-cicd-security-review:catch-up-code-reviews
- Caught up on PRs across IFT, Status, and VAC with focus on security-critical changes.
- Reviewed cryptography, key management, and secret handling paths.
- Re-audited serialization, parsing, and validation logic across Go, Nim, and JS.
- Reviewed storage, persistence, and migration changes merged during freeze periods.
- Examined dependency updates for transitive supply-chain risk.
- Reviewed CI, GitHub Actions, and release workflow changes for permission drift or secret exposure.
ift:2026q1-vulma-and-ir:incident-catch-up
- Caught up on incidents opened, updated, or closed during the year-end period and confirmed remediation status.
- Hunter finding: store nodes accepting far-future timestamps (waku-26).
- Publicly accessible asset endpoint (Status-361).
- Re-validated incident-related patches after subsequent merges.
- Reviewed Q4 ecosystem and third-party incidents for shared risk.
- Reviewed build logs, alerts, and CI outputs for anomalies after holiday releases.
- Investigated potential Discord phishing attempt (Discord thread).
ift:2026q1-vulma-and-ir:review-and-planning
- Re-reviewed CodeQL and Dependabot findings carried over from Q4.
- Dependabot alert: Next.js DoS with Server Components (status-web#277).
- Dependabot alert: Next.js DoS with Server Components (status-web#276).
- Dependabot alert: urllib3 decompression chain DoS (nimbus-eth2#48).
- Dependabot alert: Next.js RCE via React Flight protocol (status-web#273).
- Performed secondary reviews on PRs labeled security, infra, or hotfix.
- Identified high-risk areas for deeper review and documented plans.
- Aligned with maintainers on security review priorities and timelines.
ift:2026q1-finance-automation-bug fixing & support
- Monitored Finance executions daily.
- Investigated new use cases.
ift:2025q4-finance-automation-enhancements
- Deployed new PO logic for duplicate identification.
- Testing with real data pending before deployment.
ift:2025q4-revalidation of github and discord handles
- Tested options for retrieving missing identifiers via system data extraction.
ift:2025q4-create hierarchy boards in miro
- Fixed partial issues for new boards vs BBHR data.
- Tested the new version.
vac:tke: §
admin
- Reviewed all projects and updated their status.
- Updated the TKE landing page on Notion.
misc
- Continued LSSA tutorial deep dive.
vac:tke:ift:logos-token:logos-digital-twin
- Continued implementing Logos stock and flow diagrams in Machinations.
vac:tke:blockchain:stress-test:realistic-validator-model
- Started implementing a behavioral model for validators joining and leaving the system.
vac:tke:ift:support-to-ift-units:reading-by-jarrad
- Continued reading about virtual worlds and economies.
vac:tke:blockchain:stress-test:nomos-dse
- Reviewed the current proposal.
- Met with the Nomos team to discuss simulations and next steps.
- Planned to finalize simulations.
- Updated the main DSE document with simulation results.
vac:tke:ift:logos-token:fundraise
- Met with the Fundraising team to discuss current state and next steps.
vac:tke:ift:support-to-ift-units:explore-bi
- Met with the BI team to discuss collaboration.
vac:tke:ift:ecodev:xprize
vac:tke:ift:tokenomics-research-forum:betfundme
- Investigated applications for token sales.
vac:web: §