0
Teams
0
GitHub Links
Link Types:GitHubInternal (roadmap.vac.dev)ExternalTask ID

IFT-TS 2026/05/18

top highlights

  • NIM team published the nimlangserver MCP server to the official MCP registry and added CI for release bundle builds.
  • WEB team published Logos design-system npm packages while shipping new Logos website pages, CMS improvements, and Status website SEO updates.
  • INFRA team prepared Nimbus releases for rollout, tested a status-go release on notify.test, and continued Status F-Droid release support.
  • SC team locked ATA transfer recipient handling, namespaced the token program, and advanced AMM open_position and oracle work.

team highlights

  • BI: Researched Reddit threads and helped with Keycard ads strategy.
  • BI: Updated Logos funnel external-contributor visualization and exposed external contribution data through an API.
  • BI: Finished Logos communication dashboard updates.
  • BI: Fixed Status Network vault extraction and deployed the Status community bot dashboard.
  • DST: Advanced anoncomms service-discovery dogfood with standalone nim-libp2p node experiments and documented discovery issues.
  • DST: Debugged logos-delivery-module loading in logos-logoscore-cli for Logos Core evaluation.
  • DST: Merged 10ksim formatting and missing-message fixes, with base-experiment refactor work under review.
  • DST: Added lab metrics for Waku and GossipSub priority queues and started priority-queue test-node, report, and dashboard work.
  • DST: Finalized scaled connection-manager experiments with multi-hub support and shared findings with P2P.
  • INFRA: Fixed Nix private repo checkout, Dune exporter alerting, and automatic nixpkgs upgrade PRs for fleet repos.
  • INFRA: Continued Hoodi CMv2 migration, Teraswitch work, and Nimbus release preparation.
  • INFRA: Migrated Nimbus fleets toward Nix build nodes with service definitions, caching, metrics, and ERA fixes.
  • INFRA: Tested a status-go release on notify.test, pushed Status F-Droid release work, and deployed NFT chain proxy support.
  • INFRA: Upgraded CiviCRM, installed Kanban, and fixed OpenKM and invoice-generation issues.
  • NIM: Advanced Nimble with develop dependency setup, SAT solver fixes, git tag handling, and package-upgrade behavior.
  • NIM: Continued CBOR/CDDL parser and JSON/CBOR CLI work.
  • NIM: Published the nimlangserver MCP server to the official registry and added release bundle CI.
  • NIM: Added MCP support to the VS Code extension and added nimlangserver docs.
  • NIM: Continued protobuf serialization for nim-libp2p protocols.
  • P2P: Merged nim-libp2p maintenance across peerstore cancellation, websock dependency updates, BoringSSL sync, and websocket handshakes.
  • P2P: Advanced Switch service lifecycle, SwitchBuilder cleanup, PeerInfo/test cosmetics, and integration-test stability.
  • P2P: Merged nim-ffi parallel-test and context-buffer fixes.
  • P2P: Continued provider-record spillover specs and Logos Core peerstore/custom-protocol work.
  • QA: Improved LEZ fuzz targets from 9 to 14 and extracted reusable invariants.
  • QA: Merged LogosDelivery main tests part 2 and advanced remaining scenarios, with new issues opened.
  • QA: Merged service-discovery component tests and API cleanup across nim-libp2p and Logos libp2p module.
  • QA: Updated Status desktop Waku release configuration and manually tested Status Desktop 2.38 push notifications.
  • QA: Advanced chat-module E2E tests in logos core.
  • RFC: Discussed the Logos Blockchain mdBook spec proposal and opened structure and email update PRs.
  • RFC: Kept adversarial-spec deployment planning blocked on Gemini key follow-up.
  • RFC: Merged Logos-LIPs codeowner raw exclusion and IFT TS spec split PRs.
  • SC: Closed stablecoin scaffold work and continued swap UI follow-up work.
  • SC: Locked ATA transfer recipient handling and namespaced the token program.
  • SC: Implemented AMM open_position and added price-feed interface and mock-oracle serialization fixes.
  • SC: Updated LEZ to v0.2.0-rc3, SPEL account type directive usage, and IDL generation around ProgramContext.
  • SEC: Verified new treasury signing addresses and updated the master wallet index.
  • SEC: Reviewed status predeposit vaults, bridge contracts, L1/L2 endpoints, and Safe transaction batches.
  • SEC: Triaged Dependabot, code-scanning, and secret-scanning queues while remediating ejs template injection.
  • SEC: Reviewed security-sensitive status-go, status-app, and status-keycard changes, including Keycard audit follow-up.
  • SEC: Closed several Critical and High audit findings and continued HackenProof triage.
  • TKE: Adapted and rewrote hybrid PoW/PoS simulations based on feedback.
  • TKE: Discussed the post-vesting model with IFT management.
  • TKE: Continued optimal testnet stake distribution research.
  • TKE: Reviewed Logos wrapping and bridging work and kicked off wrapped-assets research.
  • TKE: Coordinated xprize payment launch and continued submission reviews.
  • WEB: Continued status.app self-hosting and Logos contact-form setup with Infra captcha credentials.
  • WEB: Implemented Logos website pages, CMS improvements, AI-friendly docs, and design-system npm packages.
  • WEB: Added Status website SEO title and description updates and title-template fixes.
  • WEB: Drafted CiviCRM CMS technical design and fixed the Circle onboarding email template link.
  • WEB: Merged Status wallet value chart, SN Hub airdrop checker, transaction fixes, and Next.js CVE patches.

ift-ts:bi:

ift-ts:dst:

ift-ts:infra:

  • DEVELP
    • Resolved Nix private repo checkout issues on GitHub runners.
    • Fixed a Dune exporter metrics alert bug caused by lack of restart.
    • Implemented automatic nixpkgs upgrade PRs for fleet repos.
  • LIDO
    • Continued Hoodi CMv2 migration on Hoodi testnet.
    • Worked to move Teraswitch hosts to double-homed racks.
    • Started writing the Teraswitch DNS postmortem.
    • Prepared new Nimbus releases for rollout.
  • ETH2 / STAKING
    • Bootstrapped new OVH metal hosts for testing nodes.
    • Copied archive-node data to a new metal host.
    • Tested the 26.5.0 Nimbus release on mainnet.
  • NIMBUS
    • Migrated Nimbus fleets to build nodes using Nix.
    • Added NixOS service definitions to Nimbus flakes.
    • Optimized to avoid Nix package rebuilds.
    • Configured the Nix CI pipeline for caching releases.
    • Developed additional Nimbus VC metrics.
    • Fixed ERA files not being generated on Hoodi hosts.
  • LOGOS
    • Set up a host for Blockchain research purposes.
  • STATUS
    • Tested a new status-go release on the notify.test fleet.
    • Discussed Status App download website and domain purchase.
    • Continued work to purchase a DigiCert Windows signing certificate.
    • Debugged Status Control node alert and backup issues.
    • Deployed new NFT chain support on proxy hosts.
    • Continued the push to release the app on F-Droid.
  • WAKU
    • Continued operating-system upgrades across all fleets.
    • Debugged WebSocket availability issues with the Waku team.
    • Researched waku.sandbox issues.
  • OFFICE
    • Upgraded CiviCRM to the latest version and installed the Kanban plugin.
    • Resolved OpenKM issues after SwissLayer host downtime.
    • Fixed invoice-generation issues caused by Keycloak field renaming.
  • HQ
    • Improved Waku node canary monitoring and logs access.
  • CI
    • Implemented automatic Nix store pruning for all hosts.
  • BI
    • Improved the Status Monitoring Bot for analytics.
    • Fixed the IFT Vault monitoring tool for Finance.

ift-ts:nim:

ift-ts:p2p:

ift-ts:qa:

ift-ts:rfc:

ift-ts:sc:

ift-ts:sec:

  • ift:2026q2-tr-continuity-plan:signatory-update
    • Verified the new clean signing addresses provided by the signatories.
    • Updated the master wallet index.
  • ift:2026q2-status-linea-merging:status-predeposit-vaults-review
    • Reviewed deployed vaults and bridge contracts in mainnet.
    • Reviewed L1 and L2 endpoints.
    • Verified Safe transaction batches to wire the L1 bridge relayer to its L2 destination.
    • No funds moved in this phase.
    • Reviewed the status-predeposit-vaults-refund repository.
    • Reviewed Solidity code.
    • Reported 3 low findings.
  • ift:2026q2-vulma-and-ir:alert-triage-and-remediation
    • Worked through Dependabot, 609 code-scanning, and 29 secret-scanning findings.
    • Pushed ejs template-injection remediation across safe-react, gnosis-safe-waku, community-dapp, status-network-site, and status-teller-network.
    • Flagged stale Google API, Firebase, and Docker Swarm tokens as accept-risk in vendored go-ethereum mirrors.
  • ift:2026q2-cicd-security-review:code-review-activities
  • ift:2026q2-cicd-security-review:keycard-audit-follow-up
    • Validated status-keycard#117 against open audit findings and found no regressions.
    • Synced with the Keycard team on remaining items.
  • ift:2026q2-policy-and-process:access-and-policy-management
  • ift:2026q2-vulma-and-ir:incident-response-and-bounty-triage
  • ift:2026q2-threat-intelligence:supply-chain-attack-research
    • Reviewed Axios, Bitwarden CLI, SAP npm, Trivy/KICS, Checkmarx Actions, and Vercel/Context.ai OAuth breach campaigns.
    • Mapped TTPs and IoCs against IFT dependencies and used the work to inform review of status-app#20807.
  • ift:2026q1-finance-automation-bug fixing & support
    • Monitored Finance executions daily.
    • Continued support and bug fixing.
  • ift:2026q1-security-automation:refine -app-catalogue-update-from-expensify
    • Monitored duplicate data scenarios daily.
  • ift:2026q2 - Investigation into migration from Discord to Element for n8n workflows
  • ift:2026q2-Investigation into KYB/KYC for new contributor profiles
    • Continued tests with different AI prompts.
    • Requested a Greenhouse sandbox.
  • ift:2026q2-pops-automation:bug fixing & support
    • Finalized review of the previous Miro workflow test version.
    • Started testing the new version.
  • ift:2026q2-internal-audit:logos-blockchain-security-review
    • Reviewed updated code and reported one finding in audit-reports#90.
    • Reviewed fixes and closed corresponding issues.

ift-ts:tke:

  • vac:tke:blockchain:stress-test:hybrid-pow-pos
    • Adapted simulations based on feedback.
    • Rewrote results based on feedback.
  • vac:tke:ift:support-to-ift-units:post-vesting
    • Discussed the model with the team and IFT management.
  • vac:tke:blockchain:stress-test:testnet-stake
    • Continued studying optimal stake distribution for testnet.
  • vac:tke:ift:ecodev:wrapped-assets
    • Reviewed the Logos Wrapping and Bridging document.
    • Kicked off research.
  • vac:tke:ift:ecodev:xprize
    • Coordinated payment launch.
    • Continued reviewing submissions.
  • vac:tke:ift:ecodev:rfp
    • Reviewed the oracle RFP.
  • vac:tke:ift:ecodev:ID-protocol
    • Researched LEZ ID potential.
    • Held a call with human.tech.

ift-ts:web: