IFT-TS Roadmaps and Reports

2026-09-21 IFT-TS weekly

15 min read

0
Teams
0
GitHub Links
Link Types:GitHubInternal (roadmap.vac.dev)ExternalTask ID

IFT-TS 2026/09/21

top highlights

  • P2P and DST teams prepare and test release 2.4.x.
  • QA team started LEZ Atomic Swaps QA audit.
  • INFRA team upgraded the LEZ release on logos.dev.

team highlights

  • BI: Continued work on LEZ testnet data transformation and its dashboard.
  • BI: Continued work on Blockchain testnet data transformation and its dashboard.
  • BI: Started a dashboard for Logos website analytics.
  • BI: Created an initial Comms funnel dashboard after meeting with the team.
  • DST: Restored Blend traces in Tempo and started building the benchmarking experiment and analyzer.
  • DST: Moved remaining system workloads to metal-01 after reducing CPU reservations.
  • DST: Ran nim-libp2p v2.4.0 regression tests and found a potential mesh formation issue in Shadow.
  • DST: Tested Logos Delivery at full scale, with complete delivery through relay, lightpush, filter, and store.
  • INFRA: Upgraded the LEZ release on logos.dev.
  • INFRA: Fixed the signing extension check for Logos module releases.
  • INFRA: Disabled QUIC temporarily on Lido worker nodes to avoid crashes.
  • INFRA: Merged the Nix shell for Status-app Linux builds.
  • INFRA: Fixed cache collisions in status-go builds.
  • INFRA: Deployed Wazuh agents to macOS CI workers.
  • NIM: Merged the Nimble 0.26.0 version bump and opened the update to Nim’s bundled Nimble.
  • NIM: Fixed nimlangserver crashes and races in workspace configuration.
  • P2P: Added standalone Mix intermediates with shared RLN proofs.
  • P2P: Exposed QUIC engine configuration through the nim-lsquic API.
  • P2P: Troubleshot nim-libp2p release 2.4.x.
  • P2P: Reduced repeated nim-libp2p logs and added summaries for batched operations.
  • P2P: Added connection attempt ranking by relay use and transport.
  • P2P: Fixed service discovery cache handling and made Kademlia bootstrap non-blocking.
  • QA: Manually tested Logos Basecamp v0.3.0_rc2 and shared six comments with developers.
  • QA: Continued LEZ sequencer registration tests and chained-caller test prerequisites.
  • QA: Scanned LEZ Atomic Swaps for security and specification compliance; manual testing continued.
  • QA: Added Status Desktop Keycard tests for recovery, PIN blocking, factory reset, and WalletConnect signing.
  • QA: Worked on measuring Status Desktop message send times.
  • QA: Reported a Status Desktop crash when opening Discover Communities with unknown curated communities.
  • SEC: Closed the macOS CI incident after confirming reinstalls, firewall hardening, and a clean indicator sweep.
  • SEC: Triaged 16 audit findings, prioritizing high-severity issues.
  • SEC: Finished treasury incident runbook updates after the first live secure multisig signing.
  • SEC: Completed the treasury wallet index reconciliation and confirmed outstanding signatory removals.
  • SEC: Reviewed merged Status changes for WalletConnect, Keycard, CI, and browser downloads.
  • SEC: Issued three LEZ findings and began reviewing Atomic Swaps.
  • TKE: Continued the report on the Logos token buyback-and-make model.
  • TKE: Reviewed the current Keycard SNT incentives proposal and built a dashboard.
  • TKE: Reviewed token sale research and addressed feedback.
  • TKE: Finished the document on mechanisms connecting culture and economics.
  • TKE: Explored B2B opportunities with EcoDev using the previous brief as a case study.
  • TKE: Analyzed liquid staking priorities and wrote a report.
  • WEB: Completed the Field Station page with application links, partner details, and accessibility fixes.
  • WEB: Shipped the PriFi page and added links throughout the Logos website.
  • WEB: Added Life’s Choices and Mike experiences to Past Present Future and fixed the desktop video.
  • WEB: Continued the Logos media migration, adding archive navigation and podcast feeds.
  • WEB: Added API provider monitoring for seven regions, with overall status reflecting the worst regional result.
  • WEB: Worked on moving the Logos funnel form API into a separate project.

ift-ts:bi:

ift-ts:dst:

ift-ts:infra:

  • develp
    • Created common infra-modules to share between fleets
    • Deployed Lido Validator exit tooling on master hosts
    • Multiple improvements to fleet CI and NixOS system diffs
    • Reviewed usage of official Nimbus service NixOS definitions
    • Ongoing work to migrate metrics setup to Thanos and S3 storage
  • lido
    • Pursued Finance to map CMv1 operator to CMv2 for consolidations
    • Resolved attestation miss spikes by redirecting KAPI queries
    • Resolved geth-04 nim-chronos bug delays by restarting VC
    • Resolved issues with ZFS force import at boot setting
    • Deployed Validator Ejector upgrade and oDAO Oracle list update
    • Temporarily disabled QUIC on Lido worker nodes to avoid crashes
    • Ongoing research into Lido 0x02 CSM testnet participation
  • staking
    • Cleanup of unused Charon service components from fleet
    • Research into first proposal with timing games enabled
    • Identified Nimbus beacon node patch bug and fixed it
  • rocket
    • Setup of new hosts for running Rocketpool with NixOS
    • Identified bottleneck in Nimbus beacon node API responses
  • logos
    • Fixed Logos modules release signing extension check
    • Worked on Logos Modules template and releases pipeline
    • Adding Attic Nix cache to more repositories
    • LEZ release upgrade on logos.dev, pipeline research
    • Created new dashboard for Logos testnet participation
    • Ongoing communication to finish DigiCert org verification
  • status
    • Finally merged Nix shell for Status-app Linux builds
    • Improvements to Status Bot metrics, engagement features
    • Help with new Status App release branch methodology
    • Fixed translation generation conflicting with app builds
    • Resolved cache collision issues in status-go builds
    • Fixes for Status Keycard E2E PR Jenkins job
  • nimbus
    • Adjusted Libp2p nodes to help debug QUIC crash issues
    • Fixed duplicate settings in nimbus-eth2 NixOS service
    • Deployed flock to disable Doppelganger detection on testnets
    • Re-generated Hoodi testnet validator keys to reduce downtime
    • Importing of nimbus-eth1 data and timers to generate ERE files
    • Configured hosting for the newly generated ERE files
    • Fixed GH Cloning issues with read-only token credential
    • Resolved nimbus-eth1 peer issues discovered on Sepolia
    • Fixed Nimbus ES cluster logs cleanup script without credentials
  • office
    • Researched OpenKM metadata updates for Legal team
  • sites
    • Disabled renewal on multiple domains after verifying
  • ci
    • Published postmortem on Status Discourse on attacked macOS hosts
    • Resolved Hetzner S3 storage failures by tuning s5cmd flags
    • Updated Nim versions on CI hosts to match Status-App requirements
    • Deployed Wazuh Agent to macOS CI slaves
  • hq
    • Research into NetBird as VPN solution for IFT infra
    • Research into Vault upgrade and encrypted snapshots
    • Improvements to WireGuard Consul check in timeout case
    • Research into Netdata losing volume mount metrics
    • Refactoring of Wazuh roles to use new Vault PKI certs role

ift-ts:nim:

ift-ts:p2p:

ift-ts:qa:

ift-ts:sec:

  • ift:2026q3-ir-vulma:security-incidents
    • macOS CI IR (macm2-01.ih-eu-mda1.ci.release, declared 2026-09-04) closed — reinstall/re-attestation confirmed with jakubgs, firewall hardening verified fleet-wide (92e9129, bca5921), IOC sweep clean
    • HackenProof Status-476 / Status-479 — dev verdict in, remediation and bounty call agreed
  • ift:2026q3-ir-vulma:vulnerability-management
  • ift:2026q3-tr-continuity-plan:define-and-test-ir-runbooks
    • Finalized the outstanding runbook definitions with Jason.
    • W0001/W0002 runbook updates from first live secure-multisig-signer signing — done
  • ift:2026q3-tr-wallet-security:audit-treasury-multisig
  • ift:2026q3-tr-continuty-plan:investment-team-recalibration
    • Backup-signatory selection with Jason and the investment team — done
  • ift:2026q3-cicd-security-review:code-review-activities
    • Post-merge reviews done: WalletConnect pairing stack (status-go #7811, status-app #22367), keycard-defect characterization (status-go #7804, #7758–#7761), post-incident CI changes (status-app #22414, #22349; status-go #7815), browser downloads stack #21849–#21853
    • Cleared carried PRs — reviewed; all seven still open upstream per 2026-09-21 crawl, no longer tracked weekly
    • Reviewed pending PAT requests; iterated on security checklist and Copilot policy
  • ift:2026q3-threat-intelligence:supply-chain-attack-research
    • Continued npm / OAuth / CI-tool supply-chain watch; macOS-miner IOCs fed into fleet detection
  • ift:2026q3-internal-audit:logos-execution-zone-security-review
    • Issued 3 x findings #164-#166
    • Drafted 2 x findings #167 and #168
    • Started the review on LEZ Atomic Swaps
    • Started writing the threat model of AMM
  • ift:2026q3-internal-audit:logos-blockchain-security-review
    • Started reviewing RFPs

ift-ts:tke:

  • vac:tke:ift:logos-token:value-accrual
    • Continued the report on the buyback-and-make model.
  • vac:tke:blockchain:pow:new-rewards
    • Addressed feedback.
  • vac:tke:ift:logos-token:token-sales
    • Addressed feedback on token sales.
    • Reviewed and commented on Danny’s token sale research.
  • vac:tke:keycard:incentives:snt
    • Reviewed the current SNT incentives proposal and built a dashboard.
  • vac:tke:ift:ecodev:node-program
    • Reviewed the node program and addressed feedback.
  • vac:tke:ift:ecodev:market-validation
    • Continued helping EcoDev reach out to projects.
    • Worked with Rahul on using the previous EcoDev brief as a case study to identify B2B opportunities in gaps left by Canton.
  • vac:tke:ift:logos-token:culture-econ
    • Finished the document on mechanisms connecting culture and economics.
  • vac:tke:lez:sequencer-econ
    • Implemented fixes and addressed discussions on sequencer economics.
  • vac:tke:ift:logos-token
    • Analyzed liquid staking priorities, wrote a report, and discussed the results.

ift-ts:web:

Graph View