---
title: "2025-06-09 Vac weekly"
tags:
  - "vac-updates"
date: 2025-06-09
lastmod: 2025-06-09
draft: false
---

## Vac 2025/06/09

### highlights
- Finished refactoring the DST analysis codebase, now is more modular and easier to expand for other projects.
- Implementations of L1/2EthBridge for SN have started.
- Released Zerokit [v0.8](https://github.com/vacp2p/zerokit/releases/tag/v0.8.0).
- Finalize production version of Security App Catalogue update process

### vac:p2p:
- `ift:2025q1-gossipsub-perf-improvements`
    - Worked on GossipSub v1.4 production implementation. First [PR is here](https://github.com/vacp2p/nim-libp2p/pull/1448).
		- Still need to add safety strategy (Will need 1-2 days more).	
- `vac:p2p:acz:2025q2-acz-consulting:libp2p-mix-consulting`
    - Had a pair session with Ben from ACZ going over the libp2p changes for mix.
    - Gave some tips on how to improve the code
    - We went over the publish / receive logic of gossipsub. Suggested to use a set of fixed node keys to make it easier to debug issues with mix
    - Troubleshoot the custom connections PR to see why Gossipsub tests were failing. Found the issue and suggested fix (wrong method signature)
- `vac:p2p:ift:2025q2-nimlibp2p-kad-dht:routing-and-rpc`
    - Did a small refactoring over the kad-dht code to separate the concept of keys and peerIds in the routing table
- `vac:p2p:acz:2025q2-acz-consulting:de-mls-consulting`
    - Helped publish a new version of zerokit RLN in npm
    - Asked Franck from Waku to grant access to waku's npm org to Ekaterina so she can publish new versions herself and not blocked by this
- `vac:p2p:ift:2025q2-nimlibp2p-maintenance:maintenance`
    - investigated [nim-libp2p#1367](https://github.com/vacp2p/nim-libp2p/pull/1367): hole punching interop tests stopped working
        - was able to run hp tests locally, with suprisngly small effort
        - no other libp2p implementation has this implemented and working
            - rust have this tests but are failing
            - other implementations don't have these tests
        - notified libp2p discord communiti; raising concerns
        - suggestion: to postpone with futher efforts on making this work untill tests are fixed or there is some other implementation with working tests
    - chore(gossipsub): add consts [nim-libp2p#1447](https://github.com/vacp2p/nim-libp2p/pull/1447)
    - fix(ci-daily): delete cache action will continue on error [nim-libp2p#1435](https://github.com/vacp2p/nim-libp2p/pull/1435)
    - work on `libp2p/test-plans`
        - implemented libp2p perf for nim
            - has to be back&forth; running locally requires AWS
            - PR with ongoing effort [test-plans#659](https://github.com/libp2p/test-plans/pull/659)
            - PR form maintainer [test-plans#658](https://github.com/libp2p/test-plans/pull/658)
        - add nim-libp2p impl for hole punching [libp2p/test-plans#322](https://github.com/libp2p/test-plans/pull/322)
            - should postpone effrot untill #1367 is fixed
    - [roadmap#174](https://github.com/vacp2p/roadmap/pull/174) wrote the universal connectivity app commitment for the roadmap
    - Worked with Ivan from Waku on [nim-libp2p#1438](https://github.com/vacp2p/nim-libp2p/pull/1438)
        - The purpose was trying to figure out if a Future was not being completed. 
        - Ended up closign the PR due to not understanding correctly the behavior of the 
          `connectedFut`future when writing the PR so the solution was incorrect and not needed
    - [libp2p/test-plan#656](https://github.com/libp2p/test-plans/pull/656): update transport-interop to v1.10.x
        - @manushel from libp2p reported the chronicles 0.10.3 / 0.11.0 issue with interop. Ended up creating a PR - 
    - [nim-libp2p#1439](https://github.com/vacp2p/nim-libp2p/pull/1439) - Add `libp2p_network_bytes` metric to Quic
    - Managed to run the prometheus metrics with libp2p. Still trying to figure out what's up with nim-libp2p memory usage when using quic. I might need to run pprof equivalent for nim, as nim-metrics does not display any useful metric
- Troubleshoot nim-chronicles breaking things downstream
        - Spent a lot of time with Ben and Akshaya trying to get couple of projects to compile
        - In addition to that happening, a related issue affected DST Gossipsub Test Node, not letting the code compile
        - The problem seems to be happening in nimble and an opened [nim-lang/nimble#1403](https://github.com/nim-lang/nimble/issues/1403) in nimble repo for @jmgomez
- `vac:p2p:ift:2025q2-nimlibp2p-autotls`
    - Started to do `peeridauth` (this is a nice byproduct of autotls btw) [#1445](https://github.com/vacp2p/nim-libp2p/pull/1445)
    - Submitted the AutoTLS Client spec to libp2p [#682](https://github.com/libp2p/specs/issues/682)
    - addressed a couple grammar issues they found
    - `vac:p2p:ift:2025q2-nimlibp2p-webtransport:http3-client`
        - continue on http3 client [nim-quic#322](https://github.com/vacp2p/nim-quic/pull/322)
    - `vac:p2p:ift:2025q2-nimlibp2p-autotls:acme-registration`
        - merged in [#1436](https://github.com/vacp2p/nim-libp2p/pull/1436)
    - `vac:p2p:ift:2025q2-nimlibp2p-autotls:certificate-request-challenge`
        - merged in [#1436](https://github.com/vacp2p/nim-libp2p/pull/1436)
- `misc/admin`:
    - [Ongoing discussion](https://discord.com/channels/864066763682218004/1379069276559773777/1380238564750790767) about how to handle semver for libraries 
    - Presented roadmap proposal for next Qs https://notes.status.im/Gee9qLXVQo-6PVi43J2J8g
    - 1 CC 1d off

### vac:tke:
- `vac:tke:ift:support-to-ift-units::logos-basket`
  - reviewed other $LOGOS token proposals 
  - addressed team feedback about current proposal
  - met with stakeholders and discuss proposals
  - Review the work of J&F and add own ideas/comments
  - work basket and joint value accrual
- `vac:tke:ift:support-to-ift-units::tge`
  - reviewed and commented on the proposed documents
- `vac:tke:codex:cdx-launch::preparations`
  - discussed our token model with Rahul
  - proposeed a token emission schedule based on a KPI
  - met with Codex team to discuss 
  - Prepare a proposal/ideas for incentivized testnet for Thu call with Codex
  - help on token emission schedule based on a KPI
- `vac:tke:nomos:macroeconomy::block-rewards`
  - implemented a dashboard that produces the token emission schedule given any number of KPIs
- `vac:tke:nomos:macroeconomy::revision-economic-model`
  - addressed feedback in the Stake Estimation doc
- `vac:tke:ift:tokenomics-research-forum:grantico`
  - Look into the grant schemes discussed at EthPrague    
- `vac:tke:status:karma-incentives:karma-params`
  - Catch up with the bridge progress
  - Start modeling Karma onboarding flow and leveling up
  - Work on getting data analysis of priority fees
- `vac:tke:nomos:macroeconomy::tfms-primer`
  - Push on tasks related to nomos DA, TFMs and block rewards
- `vac:tke:ift:tokenomics-research-forum::minting-control`
  - Keep refining work on optimal control and minting

### vac:qa:
- `status:2025q2-status-qa:v2-34`
  - Finished main round of testing for mobile v2.34, [full report](https://www.notion.so/2-34-Mobile-Release-Coordination-1f88f96fb65c80589326d087cfc6f0f5)
  - Retested several fixes, reported 12 issues
  - Leftover testing for 2.34, dealing with missing token list
  - Investigated bug with missing token list
  - Logged several issues including e2e results
    - [https://github.com/status-im/status-desktop/issues/18053](https://github.com/status-im/status-desktop/issues/18053)
    - [https://github.com/status-im/status-desktop/issues/18043](https://github.com/status-im/status-desktop/issues/18043)
    - [https://github.com/status-im/status-desktop/issues/18018](https://github.com/status-im/status-desktop/issues/18018)
  - Testing for Qt6 build [https://github.com/status-im/status-desktop/pull/18019](https://github.com/status-im/status-desktop/pull/18019)
  - Opened PR to remove unused code and merge similar tests [https://github.com/status-im/status-desktop/pull/18052](https://github.com/status-im/status-desktop/pull/18052)
  - Fixed functional test setup and reviewed mind map coverage
  - Started adapting tests for Qt 6.9 app
  - Debugged major Waku-related issue [https://github.com/status-im/status-desktop/issues/18063](https://github.com/status-im/status-desktop/issues/18063)
  - RC testing research shared with team
  - Local env set up for:
    - status-backend tests
    - squish e2e tests
    - qml tests
- `nomos:2025q2-da-testing:data-confidentiality`
  - Test/data confidentiality
    [PR 18 - merged](https://github.com/logos-co/nomos-e2e-tests/pull/18)
- `nomos:2025q2-da-testing:dispersal-resilience`
  - chore: Nomos node with mutated DA transport
    [PR 2 - in progress](https://github.com/logos-co/nomos-security-tests/pull/2)
  - Changes to `validator.rs` and `mutated_transport.rs` for new DA layer logic
- `waku:2025q2-interop-testing:maintenance`
  - bug: node won't start with RLN in on-chain dynamic mode 2
    [Issue 3208](https://github.com/waku-org/nwaku/issues/3208) – blocked waiting for release
- `vac:2025q2-nim-libp2p-testing:gossipsub-extended-part2`
  - [test(gossipsub): message cache](https://github.com/vacp2p/nim-libp2p/pull/1431) - merged
  - [test: checkUntilTimeout refactor](https://github.com/vacp2p/nim-libp2p/pull/1437) - merged
  - [fix(GossipSub): save sent iHave in first element](https://github.com/vacp2p/nim-libp2p/pull/1405) - merged
  - [test(gossipsub): paremeters](https://github.com/vacp2p/nim-libp2p/pull/1442) - merged
- `waku:2025q2-status-go-functional-testing:group-chats-tests`
  - Maintenance and onboarding support
- `admin/misc`
  - Catch up with teams and planning
  - Sync calls with team and project stakeholders
  - OOO: 4.5 CC days

### vac:dst:
- `admin/misc`
    - Create lookahead document: [notes.status link](https://notes.status.im/LNug-k1QRJ-L4u8gZzlMCg)
    - Q3 commitments draft: [Github PR](https://github.com/vacp2p/roadmap/pull/175)
    - gossipsub analysis task: [Github PR](https://github.com/vacp2p/roadmap/pull/176)
- `vac:dst:ift:2025q2-dst-tooling:analysis-refactor`
    - Finished main part of the refactor: [Github PR](https://github.com/vacp2p/10ksim/pull/66)
- `vac:dst:vac:2025q2-libp2p-evaluation:mix-gossipsub`
    - Issue compiling new branches, versioning.
        - [Github Issue](https://github.com/nim-lang/nimble/issues/1403) on nimble by p2p
        - [Github PR](https://github.com/vacp2p/dst-gossipsub-test-node/pull/9/files/ccf8120f3acea5146782f9eeb219d066efa5d050..32f6c4cfd1cba566af326f59f4db44e2d34253ae) with fixes by p2p
- `vac:dst:ift:2025q2-dst-tooling:adapt-experiments`
    - [Draft Github PR #70](https://github.com/vacp2p/10ksim/pull/70)

### vac:sc:
- `status:2025q2-sn-native-bridge-yield-bearing-module:research-design`
    - first implementation of L1ETHBridge
    - organized the issues for L1
    - opened PR with the first part of the L1ETHBridge https://github.com/vacp2p/linea-monorepo/pull/3
    - finished organizing L2 tasks
    - created second PR to add YieldRollup inheriting from LineaRollup and adding all the checks for the L1/L2 bridges https://github.com/vacp2p/linea-monorepo/pull/4
    - PR adding the L2ETHBridge contract https://github.com/vacp2p/linea-monorepo/pull/5
    - working on a new contract L2YieldMessageService that inherits from L2MessageService and validate messages between l1/l2 ETH bridges
- `status:2025q2-karma-rln:implementation`
    - Finalize & Merge 221/220
- `admin/misc`
    - Review new spec doc
    - Update commitments and add new ones for Q3
        - https://github.com/vacp2p/roadmap/pull/177
- `status:2025q2-karma-rln:slash-karma`
    - Landed slashing feature
    - Additional formal verification rules will be added in follow-up PRs
        - https://github.com/vacp2p/staking-reward-streamer/pull/215
- `status:2025q2-karma-rln:karma-tiers`
    - Started implementing karma tiers contract

### vac:acz:
- `ift:2025q2-libp2p-mix-testnet:update-rfc`
    - Finalized Section 7; Working on Section 8 out of 10, [PR](https://github.com/vacp2p/rfc-index/pull/158) 
- `ift:2025q2-libp2p-mix-testnet:nomos-comparison` 
    - Continued reviewing the Blend Protocol spec; Updated Blend protocol overview on [Notion Doc](https://www.notion.so/WiP-Blend-Protocol-Mix-1ff8f96fb65c802589c5f5e26673e69f).
- `nes:2025q2-nescience-consulting:light-users`
    - Began work on [light user analysis](https://www.notion.so/nes-2025q2-nescience-consulting-light-users-2068f96fb65c802db086d6981a50e71f) for NSSA.
    - Discovered an [inflation exploit](https://www.notion.so/Inflation-exploit-and-mitigation-20a8f96fb65c80fdbc77ff02b681f70f) in UTXO design/usage.
- `acz:nomos:2025q2-nomos-consulting:zk-consulting-nomos-2`
    - Began review of [relative stake document](https://www.notion.so/nomos-tech/Preliminary-Research-Impact-of-the-Service-Declaration-Protocol-on-the-statistical-inference-of-rel-206261aa09df807bad8afccf8474c6c9#209261aa09df803d9e07f14c76435c45).
- `ift:2025q2-ift-zk-calls:ift-zk-call-3`
    - Led [zk call](https://www.notion.so/Past-Meeting-Notes-1198f96fb65c80e6a51afa9a507aa64e?source=copy_link#2098f96fb65c801c8fa5e892e91d1296) and post corresponding forum post.
- `2025q2-libp2p-mix-testnet:solve-discrepancy`
    - Merged structured, feature-flagged logging system [PR 25](https://github.com/vacp2p/mix/pull/25)
    - Significant issues with dependency and docker build [issues](https://github.com/nim-lang/nimble/issues/1403)
    - Had detailed syncs with Ben to align on tasks; clarified next steps.
        - Reviewed and commented on [Issue #24](https://github.com/vacp2p/mix/issues/24).
    - [PR #1420](https://github.com/vacp2p/nim-libp2p/pull/1420)
        - Incrementally reintroduced changes to isolate and resolve prior GossipSub test and CI failures.
        - Made PR stable and ready for review. 
        - Addressed all initial review comments.
        - Working on tests for custom connection logic.
            - Encountering time out error with  `DummyConnection` [WiP]. 
    - Worked with DST on benchmarking setup; faced dependency issues.
- `ift:2025q2-zerokit:perfomance-updates-blogpost`
    - Received input: [Issue 314](https://github.com/vacp2p/zerokit/issues/314)
- `ift:2025q2-rln-status-l2:rpc-node-modification`
  - Add test cases for the current modifications to the RPC node [(PR)](https://github.com/vacp2p/status-linea-besu/pull/1)
  - Continue setting up the connection to Linea mainnet on the test machine
- `ift:2025q2-zerokit:release`
    - Published new zerokit [release](https://github.com/vacp2p/zerokit/releases/tag/v0.8.0). It includes new releases for zerokit-utils and zerokit-wasm
- `ift:2025q2-de-mls-tesnet:consensus-rfc`
    - Pushed few minor formatting changes into [consensus rfc](https://github.com/vacp2p/rfc-index/pull/142)
- `ift:2025q2-de-mls-tesnet:blogpost-de-mls-over-waku`
    - Pushed few minor changes into [PR](https://github.com/vacp2p/vac.dev/pull/159)
    - Update the [PR](https://github.com/vacp2p/vac.dev/pull/159) by changing admin words to steward and it is on review.
- `ift:2025q2-de-mls-tesnet:commit-and-proposal`
    - Worked on splitting commit message to proposal and commit message [branch](https://github.com/vacp2p/de-mls/tree/feat_extract_proposal)
- `ift:2025q2-zerokit:zerokit-maintaining`
    - [use all cleanup](https://github.com/vacp2p/zerokit/pull/317)
    - [recover secret id error](https://github.com/vacp2p/zerokit/pull/316)
    - Review [Zerokit 0.8 release PR](https://github.com/vacp2p/zerokit/pull/315)
    - Reviewed [PR#317](https://github.com/vacp2p/zerokit/pull/317) and [PR#316](https://github.com/vacp2p/zerokit/pull/316) with some improvements 
- `ift:2025q2-rln-status-l2:prover-service`
    - [Proof generation end to end](https://github.com/vacp2p/status-rln-prover/pull/3)
    - [Karma SC integration](https://github.com/vacp2p/status-rln-prover/pull/4)
    - [Karma RLN SC integration](https://github.com/vacp2p/status-rln-prover/pull/5)
    - [Zerokit v0.8.0 integration](https://github.com/vacp2p/status-rln-prover/pull/6) 
- `admin/misc`
    - 1 cc was ooo for 3 days (bank holiday)
    - 1 cc was ooo for 2 days (family care)

### vac:nim:
- `ift:2025q1-nimble`
    - vNext WIP #1402
        - Allow for installing global url packages
        - Fixes an issue where `.babel` packages wasnt picking their requires correctly
        - Install root package in the nimble directory when in global (There is an issue with nimble itself)
        - Partial support for uninstall in vnext (to be complete, we need to take into account develop)
        - Progress
        - Support for `requires` flags. Support for custom actions (aka test)
        - Fixes some tests
        - Dont log the action if not in vnext (it makes some fragile tests to fail)
        - Handles namedBins for the root package. Fixes an issue with `install`
        - mark as used
        - removes unnecessary echo
    - vnext lock support 
    - [WIP] fixes #1403 "Error on nimble install: Cannot satisfy the dependency
    - Review PRs

### vac:rfc:
- `admin/misc`
    - Finished draft on Status Network Staking RFC, waiting for feedback - https://github.com/vacp2p/rfc-index/pull/161
    - ZK Call support: https://youtu.be/_VOkyVOSsqA?si=W41V48r6w3jm8bHU  
- `vac:rfc:waku:2025q2-rfc-iteration:waku2-enr`
    - Continued update for WAKU2-ENR
- `vac:rfc:nescience:2025q2-rfc-iteration:utxo-specification`
    - Nescience UTXO spec draft PR: https://github.com/vacp2p/rfc-index/pull/164

### vac:sec:
- `ift:2025q2-signatory-registry-implementation:signatory-inventory-revalidation`
    - EOA included
- `ift:2025q2-signatory-registry-implementation:signatory-vault-deployment`
    - Started the deployment of a secure vault to store the master signatory db
- `ift:2025q2-signatory-registry-implementation:signatory-data-verification`
    - Continued the collection of signatory information
-  `ift:2025q2-audit-plan-refinement:smart-contract-testing`
    - Designed negative test cases targeting Vault withdrawal and access control logic.
    - Collaborated with the Codex engineering team to review recent Vault optimizations for hidden risks.
    - Automated invariant checks for Vault contract behaviors under simulated high-load conditions.
- `ift:2025q2-cicd-security-review:gha-hardening`
    - Worked with remediation plans for unresolved CodeQL issues across top repositories.
    - Audited dependencies flagged by Dependabot for transitive risk and perform validations.
- `ift:2025q2-vulma-and-ir:remediation-tracking`
    - Performed a security audit of the Status web architectural changes outlined in status-web [(issue#692)](https://github.com/status-im/status-web/issues/692).
- `ift:2025q2-security-automation: POC for app catalogue update from Expensify`
    - Fixed list of fields for App Catalogue, considering incoming data from Expensify
- `ift:2025q2-iam-operations:remove-unnecessary-users`
    - Defined a security role for Google Admin to be able to revalidate users and groups
    - Continued investigation of CC removal from Iplicit and Expensify
    - Removed users from Github, Discord and Notion

### vac:nes:
- `state-separation-architecture-poc:hybrid`
    - Quick overview of Ethereum account model to fit within NSSA.
    - Continued [drafting ideas](https://www.notion.so/Brainstorming-adaptation-of-Solana-s-model-to-NSSA-2028f96fb65c80cbb99fe978c2957758) on how Solana's model could be adapted to support a companion private state and hybrid executions. Described potential ways to adapt the functions that would be needed for a private version of the hello world example.
    - Delved deeper into the Solana codebase to understand inner workings and where some consistency checks are performed.
- `state-separation-architecture-poc:sc-utility`
    - PR reviews
    - Autogen template work [PR](https://github.com/vacp2p/nescience-testnet/pull/84)
    - Implemented autogeneration template. [Merge request](https://github.com/vacp2p/nescience-testnet/pull/83)
- `acz:t2`
    - Delivered SE/DE optimization document.
- `acz:t3`
    - Began work on [light user support analysis](https://www.notion.so/nes-2025q2-nescience-consulting-light-users-2068f96fb65c802db086d6981a50e71f). Outline security and privacy concerns, investigate light user support in other projects.
    - Detected an [inflation exploit](https://www.notion.so/Inflation-exploit-and-mitigation-20a8f96fb65c80fdbc77ff02b681f70f) in current UTXO 

