IFT-TS Roadmaps and Reports

2026-09-28 IFT-TS weekly

15 min read

0
Teams
0
GitHub Links
Link Types:GitHubInternal (roadmap.vac.dev)ExternalTask ID

IFT-TS 2026/09/28

top highlights

  • NIM team released Nimble 0.26.0.
  • SEC team Reported 18 LEZ findings and wrote an AMM threat model.

team highlights

  • BI: Continued work on the Hermes connection and researched language support for the Status Engagement Bot.
  • BI: Continued the Logos communication funnel dashboard.
  • BI: Worked on the Logos testnet dashboard.
  • DST: Repeated anoncomms service-discovery experiments and discussed unexpected findings with the team.
  • DST: Investigated nim-libp2p mesh formation and a potential Kademlia liveness issue in Shadow.
  • DST: Submitted Logos Delivery experiment and analysis changes for review.
  • DST: Made completed experiments’ analysis rerunnable from their output folders.
  • NIM: Released Nimble 0.26.0 and fixed dependency resolution and offline refresh behavior.
  • NIM: Fixed Nim network sends that could corrupt data or loop indefinitely after disconnects.
  • NIM: Updated JSON serialization API documentation.
  • P2P: Simplified anoncomms Mix routing so exits are the only destinations.
  • P2P: Exposed QUIC engine configuration through nim-libp2p.
  • P2P: Opened the nim-secp256k1 version bump to 0.7.0.8.0 and documented its version numbering.
  • P2P: Improved nim-lsquic logging.
  • P2P: Extended explicit error-result handling through nim-libp2p transports and services.
  • P2P: Fixed Kademlia liveness loops and repeated bootstrap attempts to unreachable peers.
  • QA: Merged Logos Delivery interoperability test migrations, including nightly tests through a live fleet.
  • QA: Sent Gateway the LEZ Atomic Swaps compliance and test-coverage report for v0.2.4.
  • QA: Added Status Desktop measurements for the time until a sent message appears in chat.
  • QA: Expanded Status Desktop Keycard tests for recovery, keypair imports, and returning to use without Keycard.
  • QA: Expanded status-go functional tests for Keycard migration, account restoration, and cold-wallet synchronization.
  • QA: Found an Android chat-opening failure through nightly tests; the issue was fixed.
  • SEC: Reported 18 LEZ findings and wrote an AMM threat model.
  • SEC: Reported three Logos Blockchain findings and continued reviewing audit RFPs.
  • SEC: Rechecked 23 new audit findings, including ten high-severity issues; all remained open.
  • SEC: Confirmed licenses and CI were present in nimbus-zkvm-guests.
  • TKE: Wrote an explainer and FAQs for the Logos token buyback-and-make mechanism.
  • TKE: Reviewed node-program reward calculations and discussed its design with Legal.
  • WEB: Merged native Logos article and podcast pages; production redirects and legacy blog decommissioning remained outstanding.
  • WEB: Moved Past Present Future into a SvelteKit app with reproducible builds.
  • WEB: Refreshed Field Station visuals and updated its Basecamp download links to version 0.3.0.
  • WEB: Started the CMS publishing workflow with deployment controls and an admin interface.
  • WEB: Added the Logos Zine download link to the menu.
  • WEB: Moved Logos funnel forms to the new API and validated the changes in production.

ift-ts:bi:

ift-ts:dst:

ift-ts:nim:

ift-ts:p2p:

ift-ts:qa:

ift-ts:sec:

  • ift:2026q3-internal-audit:logos-execution-zone-security-review
    • Issued ten findings, #180–#189, and shared them in the Discord thread.
    • Started reviewing lez-programs and wrote an AMM threat model.
    • Issued two findings on amm-program, #169–#170, and six on amm-app, #171–#176.
  • ift:2026q3-internal-audit:logos-blockchain-security-review
    • Issued three findings, #177–#179.
    • Continued reviewing RFPs; the search for audit firms continued.
  • ift:2026q3-ir-vulma:security-incidents
    • The September 28 GitHub check found no visible remediation PRs for Status-476 / Status-479; remediation status on HackenProof remained unconfirmed.
  • ift:2026q3-ir-vulma:vulnerability-management
    • Rechecked the logos-co audit findings: 23 new findings since September 21, #167–#189, all open: ten high, seven medium, and six low severity; 20 concerned LEZ and three concerned Logos Blockchain.
    • Findings #143–#158 remained open. High-severity finding #163 was the only closure observed since September 14.
  • ift:2026q3-tr-wallet-security:audit-treasury-multisig
  • ift:2026q3-cicd-security-review:code-review-activities

ift-ts:tke:

  • other notes
    • OOO: 1 CC days.
  • vac:tke:ift:logos-token:value-accrual
    • Wrote an explainer and FAQs about the buyback-and-make mechanism.
    • Continued working on the buyback-and-make model.
  • vac:tke:ift:ecodev:node-program-validators
    • Reviewed the points-reward calculation.
    • Discussed the node program design with Legal.

ift-ts:web:

Graph View