# 2025-08 Vac monthly
P2P § highlights § Mix senders are able to get responses from destination nodes via SURBs Universal Connectivity App work’s been completed Achieved interop between diff implementations Kademlia support will be added once Kademlia commitment is completed so in the meantime, connection to peers must be done manually Release v1.

- - Nomos Consulting
- Nomos Consulting
- Nomos Consulting
- Nomos Consulting
- - Waku RLN Relay
- ACZ Roadmap Preview
- - - - - - - proxy-re-encryption
        - - Nescience ZK Consulting
      - - init
  - - - Status RLN Usage
  - - Light RLN Verifiers
  - RLN Doc and Outreach
- RLN Light Clients
- - Multi Epoch Constraints
- RLN relay ERC20
- RLN v2 E2E integration
- RLN v2 Waku Relay Integration
- RLNP2P Waku Pruduction Readiness Details
- Waku RLN Membership Management Details
- Waku RLN-RELAY Enhancements 02
- Waku RLN-RELAY Enhancements Details
- - - Secure Channels - fully decentralized design
  - Secure Channels - MLS design
- Secure Channels - MLS PoC
- Secure Channels - PoC of fully decentralized protocol
- - Stealth Address Kit Maintenance
- Stealth Address Kit Research
- - - Productionize Tor Push in Nimbus
- - - maintenance
  - Zerokit v0.4 Release Details
- Zerokit v0.5 Release
- Zerokit v0.6 Release
- - - - Gossipsub Anonymity Layer
- - - Carnot Paper
- - - Reviews
- - - Gossipsub Improvements Paper
  - Gossipsub Simulation
- Unstructured P2P Improvements Survey
- - - Tor Push Paper
  - Tor Push PoC
- Tor Push Related Work
- - - Codex Deep Research ZK consulting
  - Storage Proofs: Open Problems Review
- - - - Blockchain Security in Crypto-economic Models
    - Carnot 2/3 Vote aggregation
  - Carnot Bribary Article
- Carnot Paper 02
- Detecting Reporting Attacks Carnot
- Inter Chain Protocol
- Multi-Leader and Multi-Overlay Carnot
- Network Privacy Stack - Stakeholder Privacy
- - - validator-privacy
- - mix-net-solution
- priv-validator-network
- tor-push-rln
- - - - Testnet
  - - Mixnet
- - Ongoing testing of specific monthly libp2p releases
- - 10k Node Cluster
- Midscale
- - - Bundle Simulation Data
- - - Deployer Tool
  - Visualiser Tool
- - - CI Integration
- - Rlog: Wakurtosis Retrospective
- Wakurtosis Maintenance
- - Techreport
- Techreport_02
- Wakurtosis Features
- - - - Control Messages
  - - Refactoring
- - - Basic Shadow Simulation
  - Shadow Gossipsub Analysis
- - Shadow Waku Relay Analysis
- - - Carnot 2-3rds Vote Aggregation Python Implementation
- - Simulation Analysis
- - - Rlog: Wakurtosis Retrospective
  - Wakurtosis Rlog
- - Gossipsub Topology Analysis
- - 2023-aug
- - - - Benchmarks
    - Research Existing Proofsystems
- - - State Separation Architecture 01
  - State Separation Architecture 02
- - - VM Ecosystem
  - VM Foundations
- - - - chronos-maintainance
- - - compiler
  - editor
- lsp
- nim-suggest
- nimble
- - - - Libchronos Maintenance
- - - Gossipsub DDoS Mitigation
  - Gossipsub Improvements EIP 4844
- Gossipsub Stagger Send
- Libp2p Maintenance
- WebRTC Transport
- - - - Test Automation Codex Discovery
  - - Test Automation cryptarchia
  - Test Automation Data Availability
- - Test Automation nim-libp2p
- Test Automation nim-tooling
- - Interop Testing
- Interop Testing Part 2
- Maintenance go-waku
- Maintenance js-waku
- Maintenance nwaku
- Status-go CLI Testing
- Status-go CLI Testing 2
- Test Automation go-waku
- Test Automation js-waku
- Test Automation nwaku
- Test Automation RLN
- Test Automation Sharding
- Test Plan RLN
- Test Plan Sharding
- Test Plans
- WebSockets Stress Testing
- - - - specs-init
  - - carnot-specification
  - carnot-threat-model-informational
- carnot-vote-2-3rds-vote-aggregation-specification
- inter-chain-protocol-specification
- multi-leader-and-multi-overlay-carnot-specification
- specs-init
- - Port Status Specs
- - rfc-index
- rfc-process-update
- - core-rfc-updates
- Waku Keystore
- - - - Contracts Formal Verification
    - Review Codex Contracts
- - Access Control Safe Support
- - Community Contracts CollectibleV1 Batch transaction Extension
- Community Contracts Deployer
- Community Contracts ERC20
- Community Contracts ERC721
- Community Contracts Maintenance
- Community Contracts Token Import
- Community Curation dapp Contracts
- Community Vaults - Token Airdrop
- ENS Usernames contracts maintenance
- Governance Contract MVP
- MiniMe Token Enhancements
- MiniMe Token Maintenance
- SNT Optimism Bridge
- Status Staking Contract Maintenance Details
- Status Staking Contract MVP
- Status Staking Contract V1
- Status Swap Aggregator
- - Secureum Upskilling
- Vac RLN Contract Support Details
- - - - Analysis of the Codex Token
    - Codex Bandwidth Incentives
  - Codex Contract Default
- Codex Contract Finalization
- Codex Contract Initiation
- Codex Contract Matching
- Codex Economic Analysis
- Codex Fee Mechanism
- Codex Insurance Mechanism Analysis
- Codex Lender Analysis
- Codex Proof Aggregators
- Codex Recovery Auction
- Codex Slot Repair
- Codex Tax System
- Codex Testnet Incentives
- - Finance Real Option Models
- Financial Growth Models
- - Cryptarchia Wealth Concentration Estimated Stake
- Cryptarchia Wealth Concentration Known Stake
- Nomos Delegation Research
- Nomos Economic Analysis
- Nomos Enshrined Delegation
- Nomos Mixnet Incentives
- Nomos Non Private L2 Consensus
- Nomos Penalizable Actions
- Nomos Rewarded Actions
- Nomos Shared Liquidity
- Nomos Supply Policy
- Nomos TDC Objectives
- Nomos Transaction Fee
- Nomos Validator Rewards
- Nomos Validator Rewards
- Nomos Whitepaper
- - Incentivize Status Communitities
- SNT Governance Proposal
- SNT Litepaper
- SNT Staking
- Status L2 deployment
- Waku Sharding
- - Waku Economic Analysis
- Waku General Incentives
- Waku RLN Attacks Vectors
- Waku RLN Membership
- Waku RLN Risks
- Waku Store Incentives
- - 2023-07-10 Vac Weekly
- 2023-07-17 Vac weekly
- 2023-07-31 Vac weekly
- 2023-08-03 Vac weekly
- 2023-08-07 Vac weekly
- 2023-08-17 Vac weekly
- 2023-08-21 Vac weekly
- 2023-08-28 Vac weekly
- 2023-09-04 Vac weekly
- 2023-09-11 Vac weekly
- 2023-09-18 Vac weekly
- 2023-09-25 Vac weekly
- 2023-10-02 Vac weekly
- 2023-10-09 Vac weekly
- 2023-10-16 Vac weekly
- 2023-10-23 Vac weekly
- 2023-10-30 Vac weekly
- 2023-11-06 Vac weekly
- 2023-11-13 Vac weekly
- 2023-11-20 Vac weekly
- 2023-11-27 Vac weekly
- 2023-12-04 Vac weekly
- 2023-12-11 Vac weekly
- 2023-12-18 Vac weekly
- 2023-12-25 Vac weekly
- 2024-01-01 Vac weekly
- 2024-01-08 Vac weekly
- 2024-01-15 Vac weekly
- 2024-01-22 Vac weekly
- 2024-01-29 Vac weekly
- 2024-02-05 Vac weekly
- 2024-02-12 Vac weekly
- 2024-02-19 Vac weekly
- 2024-02-26 Vac weekly
- 2024-03-04 Vac weekly
- 2024-03-11 Vac weekly
- 2024-03-18 Vac weekly
- 2024-03-25 Vac weekly
- 2024-04-02 Vac weekly
- 2024-04-08 Vac weekly
- 2024-04-15 Vac weekly
- 2024-04-22 Vac weekly
- 2024-04-29 Vac weekly
- 2024-05-06 Vac weekly
- 2024-05-13 Vac weekly
- 2024-05-21 Vac weekly
- 2024-05-27 Vac weekly
- 2024-06-03 Vac weekly
- 2024-06-10 Vac weekly
- 2024-06-17 Vac weekly
- 2024-06-24 Vac weekly
- 2024-07-01 Vac weekly
- 2024-07-08 Vac weekly
- 2024-07-15 Vac weekly
- 2024-07-22 Vac weekly
- 2024-07-29 Vac weekly
- 2024-08-05 Vac weekly
- 2024-08-12 Vac weekly
- 2024-08-19 Vac weekly
- 2024-08-26 Vac weekly
- 2024-09-02 Vac weekly
- 2024-09-09 Vac weekly
- 2024-09-16 Vac weekly
- 2024-09-23 Vac weekly
- - - Finance Wallet monitoring
  - Improve Finance Reporting
- - Comms Discord Statistics
- IFT Finance Reporting
- IFT Weekly News Website
- Program Overview Dashboard
- Smart Contract Monitoring
- Townhall helper
- Townhall transcript
- VAC Website Contributors
- X Space Analytics
- - Github Monitoring
- Logos Circle Event Dashboard
- Logos Circle Monitoring
- Logos Public RAG
- Logos Winnable Stories extractions
- - RAG Context
- RAG Embedding and Context
- RAG Evaluation mechanism
- RAG MCP Integration
- - Status Social Pipeline
- BI Roadmap Preview
- - - Anoncomms Evaluation
- - Blockchain Evaluation
- - Codex Base Capacity
- Codex Base Capacity
- Codex Comparison
- Codex Comparison
- Codex Evaluation
- - DST Conduit
- DST Conduit
- DST Conduit
- DST Lab
- DST Lab
- DST Research destination
- DST Research destination
- DST Research destination
- DST Research destination
- DST Research destination
- DST Tooling
- DST Tooling
- DST Tooling
- DST Tooling
- Libp2p Evaluation
- Scaling think tank
- Scaling think tank
- VacLab
- VacLab
- VacLab
- Visualiser Tool
- - Logos-core Evaluation
- - Messaging Evaluation
- Messaging Scaling
- - Nomos Scaling
- Nomos Scaling
- Nomos Scaling
- Nomos Scaling
- - Status chat protocol benchmarks
- Status evaluation
- Status evaluation
- Status-go chat protocol benchmarks
- Status-go chat protocol benchmarks
- - Storage Evaluation
- - Libp2p Evaluation
- Libp2p Evaluation
- Libp2p Evaluation
- Libp2p Evaluation
- Libp2p Evaluation
- - Theoretical Analysis
- Waku Evaluation
- Waku Evaluation
- Waku Evaluation
- Waku Evaluation
- Waku Evaluation
- Waku Scaling
- Waku Scaling
- Waku Scaling
- Waku Scaling
- Waku Scaling
- Waku Tooling
- Waku Tooling
- DST Roadmap Preview
- - 2024-10 Vac monthly
- 2024-11 Vac monthly
- 2024-12 Vac monthly
- 2025-01 Vac monthly
- 2025-02 Vac monthly
- 2025-03 Vac monthly
- 2025-04 Vac monthly
- 2025-05 Vac monthly
- 2025-06 Vac monthly
- 2025-07 Vac monthly
- 2025-08 Vac monthly
- 2025-09 Vac monthly
- 2025-10 Vac monthly
- 2025-11 Vac monthly
- 2025-12 Vac monthly
- - - 2024q4 Nimble
  - 2025q1 Nim IDE tooling
- 2025q1 Nimble
- 2025q2 Nim IDE tooling
- 2025q2 Nimble
- 2025q3 Nim Core Libraries
- 2025q3 Nim IDE tooling
- 2025q3 Nimble
- 2025q4 Nim Core Libraries
- 2025q4 Nim IDE tooling
- 2025q4 Nimble
- 2026q1 Nim Core Libraries
- 2026q1 Nimble
- Nim IDE Tooling 2024Q4
- - Logos Storage Nimble Integration
- Messaging Nimble Integration
- - Nimbus Nimble Integration
- Nimbus Nimble Integration
- - Waku Nimble Integration
- Nim Roadmap Preview
- - - ACZ Consulting
  - ACZ Consulting
- ACZ Consulting
- - AutoNAT v2
- GossipSub Extensions and Partial Messages
- GossipSub Performance Improvements
- GossipSub Performance Improvements
- GossipSub Performance Improvements
- Kademlia DHT
- Kademlia DHT
- Kademlia DHT
- nim-libp2p Auto TLS
- nim-libp2p c-bindings
- nim-libp2p c-bindings
- nim-libp2p Connection Management
- nim-libp2p IPv6 support
- nim-libp2p logos-core
- Nim-libp2p maintenance
- Nim-libp2p maintenance
- Nim-libp2p maintenance
- Nim-libp2p maintenance
- Nim-libp2p maintenance
- Nim-libp2p Mix
- Nim-libp2p Mix
- nim-libp2p Universal Connectivity App
- nim-libp2p Universal Connectivity App
- nim-libp2p Universal Connectivity App
- nim-libp2p Webtransport
- nim-libp2p Webtransport
- nim-libp2p Webtransport
- nim-libp2p Webtransport
- nim-libp2p Webtransport
- nim-libp2p Wrapping ngtcp2
- Quic Stabilization and removal of runtime dependencies
- - nim-libp2p Test Coverage
- nim-libp2p Test Coverage
- P2P Roadmap Preview
- - - Anoncomms testing
- - Codex Integration Testing
- - Nim Libp2p Testing
- Projects QA Strategy
- Projects QA Strategy
- QA & RFC Synchronization for Js-Waku Project - Core Protocols
- QA & RFC Synchronization for Js-Waku Project - Core Protocols
- QA & RFC Synchronization for Waku Project - Core Protocols
- - Keycard Testing
- Keycard Testing
- Keycard Testing
- - Logos Core QA
- - Messaging Testing
- - Nomos Data Availability Testing
- Nomos Data Availability Testing
- Nomos Data Availability Testing
- Nomos E2E Testing for Nomos Node
- Nomos E2E Testing for Nomos Node
- Nomos E2E Testing for Nomos Node
- - Status Go Functional Testing
- Status Go Functional Testing
- Status Go Functional Testing
- Status Go Functional Testing
- Status QA
- Status QA Desktop
- Status QA Desktop
- Status QA Desktop
- Status QA Documentation
- Status QA Mobile
- Status QA Mobile
- Status QA Mobile
- - Nim Libp2p Testing
- Nim Libp2p Testing
- Nim Libp2p Testing
- Nim Libp2p Testing
- - Chat SDK Testing
- Direct Message Reliability Testing
- Messaging API Testing
- RLN Smart Contract Testing
- RLN Smart Contract Testing
- Status Go Functional Testing
- Waku Interop Testing
- Waku Interop Testing
- Waku Interop Testing
- Waku Interop Testing (extended)
- Waku Testing
- waku-go-bindings Testing
- waku-go-bindings-testing Testing Framework
- Waku-sync Integration Testing
- Waku-sync Testing
- QA Roadmap Preview
- - - RFC Iteration
- - RFC Iteration
- - Marketplace and Client 2024q4
- RFC Iteration
- RFC Iteration
- RFC Iteration
- - Integration with QA
- Integration with QA
- Integration with QA
- RFC Culture Establishment
- RFC Culture Establishment
- RFC Culture Establishment
- RFC Culture Establishment
- RFC Culture Establishment
- rfc-index-maintenance
- rfc-index-maintenance
- rfc-index-maintenance
- rfc-index-maintenance
- rfc-index-maintenance
- rfc-index-maintenance
- - RFC Iteration
- - RFC Iteration
- - RFC Iteration
- RFC Iteration
- - Data Availability Raw RFC
- Data Availability Raw RFCs
- Data Availability Raw RFCs
- RFC Iteration
- RFC Iteration
- RFC Iteration
- RFC Iteration
- - RFC Iteration
- RFC Iteration
- Status Specs to RFC-Index Migration
- - RFC Iteration
- - 2024q4 RFC Iteration
- Migration of PoC Waku RFCs to the rfc-index
- RFC Iteration
- RFC Iteration
- RFC Iteration
- RFC Iteration
- - RFC Iteration
- RFC Roadmap Preview
- - - MLS Smart Contracts Consulting
- - ghost.fun Protocol Review
- - Codex Vault Integration
- Formal Verification (Part 1)
- Formal Verification (Part 2)
- - EIP Discussions
- Formal Verification Tools Research
- Security Audits
- Security Audits
- Security Audits
- Security Audits
- Smart Contracts LearnUp Sessions
- Smart Contracts LearnUp Sessions
- Smart Contracts LearnUp Sessions
- Smart Contracts LearnUp Sessions
- - Risc0 Upskilling
- - Base Chain Integration
- Comunities Contracts on Status Network testnet
- Karma RLN
- Maintainin existing Status smart contracts
- Maintainin existing Status smart contracts
- Staking Protocol (v1)
- Staking Protocol Documentation
- Staking Protocol Refinement
- Status Network Native Bridge Yield Bearing Module
- Status Network Native Dex
- Status Smart Contracts Consulting
- Status Smart Contracts Consulting
- XP NFT (v1)
- XP Token (v1)
- - Maintaining existing Status Network L2 smart contracts
- New Karma Requirements for SN L2
- SN L2 Bridge DAI Yield Management
- SN L2 Bridge ETH Yield Management
- Status Network Karma Enhancements
- Status Network L2 Audit Preparation
- Status Network L2 Pre-Audit Protocol Enhancements
- SC Roadmap Preview
- - - Demos
  - Logos Contributions Portal
- Logos Core
- Logos Marketing Campaign Narratives & Brand Testing
- Logos Website
- Logos Website
- Newsletter
- Parallel Society Festival Website
- Qaku App
- Web Maintenance & Support
- Web Maintenance & Support
- - Keycard Website
- Keycard Website
- - Contribute Portal
- Logos Forum
- Logos Website
- - Community Curation
- SN Hub
- SN Hub
- SN Hub
- SN Website
- SN Website
- Status App
- Status App
- Status Wallet Extension
- Status Wallet Extension
- Status Website
- Status Website
- Status Website
- Web Roadmap Preview
- - 2023-07-10 Vac Weekly
- 2023-07-17 Vac weekly
- 2023-07-31 Vac weekly
- 2023-08-03 Vac weekly
- 2023-08-07 Vac weekly
- 2023-08-17 Vac weekly
- 2023-08-21 Vac weekly
- 2023-08-28 Vac weekly
- 2023-09-04 Vac weekly
- 2023-09-11 Vac weekly
- 2023-09-18 Vac weekly
- 2023-09-25 Vac weekly
- 2023-10-02 Vac weekly
- 2023-10-09 Vac weekly
- 2023-10-16 Vac weekly
- 2023-10-23 Vac weekly
- 2023-10-30 Vac weekly
- 2023-11-06 Vac weekly
- 2023-11-13 Vac weekly
- 2023-11-20 Vac weekly
- 2023-11-27 Vac weekly
- 2023-12-04 Vac weekly
- 2023-12-11 Vac weekly
- 2023-12-18 Vac weekly
- 2023-12-25 Vac weekly
- 2024-01-01 Vac weekly
- 2024-01-08 Vac weekly
- 2024-01-15 Vac weekly
- 2024-01-22 Vac weekly
- 2024-01-29 Vac weekly
- 2024-02-05 Vac weekly
- 2024-02-12 Vac weekly
- 2024-02-19 Vac weekly
- 2024-02-26 Vac weekly
- 2024-03-04 Vac weekly
- 2024-03-11 Vac weekly
- 2024-03-18 Vac weekly
- 2024-03-25 Vac weekly
- 2024-04-02 Vac weekly
- 2024-04-08 Vac weekly
- 2024-04-15 Vac weekly
- 2024-04-22 Vac weekly
- 2024-04-29 Vac weekly
- 2024-05-06 Vac weekly
- 2024-05-13 Vac weekly
- 2024-05-21 Vac weekly
- 2024-05-27 Vac weekly
- 2024-06-03 Vac weekly
- 2024-06-10 Vac weekly
- 2024-06-17 Vac weekly
- 2024-06-24 Vac weekly
- 2024-07-01 Vac weekly
- 2024-07-08 Vac weekly
- 2024-07-15 Vac weekly
- 2024-07-22 Vac weekly
- 2024-07-29 Vac weekly
- 2024-08-05 Vac weekly
- 2024-08-12 Vac weekly
- 2024-08-19 Vac weekly
- 2024-08-26 Vac weekly
- 2024-09-02 Vac weekly
- 2024-09-09 Vac weekly
- 2024-09-16 Vac weekly
- 2024-09-23 Vac weekly
- 2024-09-30 Vac weekly
- 2024-10-07 Vac weekly
- 2024-10-14 Vac weekly
- 2024-10-21 Vac weekly
- 2024-10-28 Vac weekly
- 2024-11-04 Vac weekly
- 2024-11-11 Vac weekly
- 2024-11-18 Vac weekly
- 2024-11-25 Vac weekly
- 2024-12-02 Vac weekly
- 2024-12-09 Vac weekly
- 2024-12-16 Vac weekly
- 2024-12-23 Vac weekly
- 2024-12-30 Vac weekly
- 2025-01-06 Vac weekly
- 2025-01-13 Vac weekly
- 2025-01-20 Vac weekly
- 2025-01-27 Vac weekly
- 2025-02-03 Vac weekly
- 2025-02-10 Vac weekly
- 2025-02-17 Vac weekly
- 2025-02-24 Vac weekly
- 2025-03-03 Vac weekly
- 2025-03-10 Vac weekly
- 2025-03-17 Vac weekly
- 2025-03-24 Vac weekly
- 2025-03-31 Vac weekly
- 2025-04-07 Vac weekly
- 2025-04-14 Vac weekly
- 2025-04-21 Vac weekly
- 2025-04-28 Vac weekly
- 2025-05-05 Vac weekly
- 2025-05-12 Vac weekly
- 2025-05-19 Vac weekly
- 2025-05-26 Vac weekly
- 2025-06-02 Vac weekly
- 2025-06-09 Vac weekly
- 2025-06-16 Vac weekly
- 2025-06-23 Vac weekly
- 2025-06-30 Vac weekly
- 2025-07-07 Vac weekly
- 2025-07-14 Vac weekly
- 2025-07-21 Vac weekly
- 2025-07-28 Vac weekly
- 2025-08-04 Vac weekly
- 2025-08-11 Vac weekly
- 2025-08-18 Vac weekly
- 2025-08-25 Vac weekly
- 2025-09-01 Vac weekly
- 2025-09-08 Vac weekly
- 2025-09-15 Vac weekly
- 2025-09-22 Vac weekly
- 2025-09-29 Vac weekly
- 2025-10-06 Vac weekly
- 2025-10-13 Vac weekly
- 2025-10-20 Vac weekly
- 2025-10-27 Vac weekly
- 2025-11-03 Vac weekly
- 2025-11-10 Vac weekly
- 2025-11-17 Vac weekly
- 2025-11-24 Vac weekly
- 2025-12-01 Vac weekly
- 2025-12-08 Vac weekly
- 2025-12-15 Vac weekly
- 2025-12-22 Vac weekly
- 2025-12-29 Vac weekly
- 2026-01-05 Vac weekly
- Website Terms of Use
- What's in a Milestone

# 2025-08 Vac monthly

Jan 06, 2026, 18 min read

- #vac-monthly

### P2P §

#### highlights §

- Mix senders are able to get responses from destination nodes via SURBs
- Universal Connectivity App work’s been completed
  - Achieved interop between diff implementations
  - Kademlia support will be added once Kademlia commitment is completed so in the meantime, connection to peers must be done manually
- Release v1.12.0 of nim-libp2p

#### report §

- `vac:p2p:ift:2025q3-nimlibp2p-mix:mix-core`
  - Overview:
    - Implemented SURBs so senders can receive replies from request/response protocols
    - Refactorings to improve code quality and easier testing by DST
    - Remove `exit == destination` use case as it is not part of the spec
    - Added support for circuit relay and quic
  - Delivered deliverables:
    - mix#83 chore: add comments to public API
    - mix#81 refactor: remove `exit == destination`
    - mix#80 feat: mixrunner
    - mix#79 fix: don’t use global variables
    - mix#78 feat: replies
    - mix#73 feat: create SURBs and send response back
    - mix#71 fix: do not encode a delay for last hop
    - mix#70 refactor: remove entry_connection_callbacks and gossipsub related procs
    - mix#69 feat: add support for circuit relay multiaddresses and fixes quic multiaddresses
    - mix#68 feat: Add Single-Use Reply Block (SURB) Functionality
- `vac:p2p:ift:2025q2-nimlibp2p-universal-connectivity-app`
  - Overview:
    - Completed the development of the universal connectivity app, with an UI and behavior that matches other implementations
    - Implements also file exchange (which has not been completed yet by other implementations)
    - KadDHT support is still pending as this protocol is still under active development
  - Completed tasks:
    - `vac:p2p:ift:2025q2-nimlibp2p-universal-connectivity-app:chat`
    - `vac:p2p:ift:2025q2-nimlibp2p-universal-connectivity-app:file-exchange`
  - Delivered deliverables:
    - vacp2p/universal-connectivity#1
    - libp2p/universal-connectivity#306
- `vac:p2p:ift:2025q3-nimlibp2p-autonatv2`
  - Overview:
    - Completed the development of the server side of the protocol
    - Client side and Service in progress
  - Delivered deliverables:
    - nim-libp2p#1637 Message Types
    - nim-libp2p#1658 Server
- `vac:p2p:ift:2025q3-nimlibp2p-kad-dht`
  - Overview
    - Implemented `PUT_VALUE`
    - Refactors and follow up on pending items from `FIND_NODE`
  - Delivered deliverables:
    - nim-libp2p#1624 feat: `PUT_VALUE`
    - nim-libp2p#1623 key-refactor to not track hash-state
- `vac:p2p:ift:2025q3-nimlibp2p-maintenance:maintenance`
  - Overview: - Release v1.12.0 of nim-libp2p
    - Fixed issue in which a GoAway was being sent when closing a stream, effectively disconnecting all active streams in Yamux
    - Refactoring and code improvements over Quic, removing possible race conditions when transport is closed or EOF is sent
    - Debugging to determine conditions under which sometimes FIN flags are not being sent
    - Enabled Quic transport in unit tests
    - Compile nimbus on daily
    - Fixed transport interop tasks which was failing due to redis dependency
    - Fixed generation of docs for nim-libp2p
  - Delivered deliverables:
    - Maintenance work is being tracked in Maintenance 2025Q3
- `misc/admin`
  - Overview:
    - 9.5 OOO days from CCs

### Tokenomics §

#### highlights §

- Karma Incentives: Enhanced the Staking app with a Karma tier system, broader wallet support, improved faucet functionality, and seamless chain switching.
- Nomos Cryptoeconomics: Produced final specs for the Execution Market, Data Storage Market, Block Rewards, and Minimum Stake for SDP; contributed an overview of Nomos’ cryptoeconomics and updated KPI emission models.
- Research Contributions: Compiled a resource hub for Tokenomics and DeFi learners and completed a data-driven token valuation study using Random Forest Regression.

#### report §

- `vac:tke:status:karma-incentives`

  - Overview:
    - Extented the Staking app with the introduction of the Karma tier system
    - Fixed bugs and added support to more wallets based on public feedback
    - Improved the faucet functionality
    - Added chain check and switching functionality
  - Completed tasks:
    - `vac:tke:status:karma-incentives:staking-demo-tiers`

- `vac:tke:nomos:stress-test`

  - Overview:
    - Delievered final and revised versions of four Cryptoeconomic-related specs for Nomos, namely the Execution Market, the Data Storage Market, the Block Rewards, and the Minimum Stake for the SDP.
    - Assisted Nomos to write an overview document about Cryptoeconomics of Nomos
  - Completed tasks:
    - `vac:tke:nomos:stress-test:review-block-rewards`
    - `vac:tke:nomos:stress-test:review-nomos-da`
    - `vac:tke:nomos:stress-test:review-stake-estimation`
    - `vac:tke:nomos:stress-test:review-cryptoeconomics`
    - `vac:tke:nomos:stress-test:blockspace-target`
    - `vac:tke:nomos:stress-test:redefine-storage`
    - `vac:tke:nomos:stress-test:update-kpi-emission`
    - `vac:tke:nomos:stress-test:improve-blockspace`
    - `vac:tke:nomos:stress-test:review-blockspace`

- `vac:tke:ift:tokenomics-research-forum`

  - Overview:
    - Prepared a general, non-exhaustive list of Tokenomics‑ and DeFi‑related links for those willing to learn more about these topics
    - Finalized a data-driven study of token valuation metrics using Random Forest Regression
  - Completed tasks:
    - `vac:tke:ift:tokenomics-research-forum:tke-resources`
    - `vac:tke:ift:tokenomics-research-forum:token-valuation`

### QA §

#### highlights §

- Implemented onboarding flow tests and expanded accounts service coverage for `status-go`.
- Enhanced Waku interop tests: REST APIs, rendezvous discovery, lite protocol, and WakuCannary investigations.
- Expanded RLN smart contract unit tests with edge-case scenarios and reentrancy protection.
- Achieved major nim-libp2p testing milestones: performance testing, rendezvous tests, yamux coverage, and pagination fixes.
- Validated multiple Status Desktop releases, fixed failing tests, added Windows CI support, and improved load-time measurement.
- Advanced Keycard Shell testing: single-chain, multichain, and new OS version integrations.
- Launched Status Mobile framework with Appium, seed phrase tests, and accessibility hooks.
- Conducted hiring activities, interviews, and handled team OOO schedules.

#### report §

- `status:2025q3-status-go-functional-testing:critical-flows`
  - Overview:
    - Added onboarding, backup/restore, account creation, and accounts service tests across multiple phases.
    - Logged issues for seed account problems and message delivery failures.
  - Delivered Deliverables:
    - PRs: 6789, 6795, 6814, 6850, 6859
    - Issues: 6849, 6857
- `status:2025q3-status-go-functional-testing:framework-improvements`
  - Overview:
    - Refactored schema validation and improved test reliability for status-go backend.
  - Delivered Deliverables:
    - PRs: 6806, 6827
- `waku:2025q3-interop-testing:wakucannary`
  - Overview:
    - Developed WebSocket protocol tests, debugged connection issues, logged infra problems.
  - Delivered Deliverables:
    - PRs: 130
    - Issues: 3546
- `waku:2025q3-interop-testing:REST-APIs-Extended`
  - Overview:
    - Added debug/admin API coverage, log-level tests, and resolved peer connection inconsistencies.
  - Delivered Deliverables:
    - PRs: 133, 134
    - Issues: 3541, 3542
- `waku:2025q3-interop-testing:rendezvous-peer-discovery`
  - Overview:
    - Implemented and debugged peer discovery tests, reported blocking infra issues.
  - Delivered Deliverables:
    - PRs: 132
    - Issues: 3549
- `waku:2025q3-interop-testing:liteprotocoltester`
  - Overview:
    - Started Store protocol testing using performance scripts and automation.
  - Delivered Deliverables:
    - PRs: 135
- `waku:2025q3-waku-go-bindings-testing:12hlongevity`
  - Overview:
    - Enhanced CI scripts, optimized memory usage logging, and filtered flaky tests.
  - Delivered Deliverables:
    - PRs: 89
- `waku:2025q3-rln-smart-contract-testing:edge-cases`
  - Overview:
    - Expanded unit tests, added reentrancy protection, addressed edge conditions.
  - Delivered Deliverables:
    - PRs: 31
    - Issues: 32
- `vac:2025q3-nim-libp2p-testing:gossipsub-performance`
  - Overview:
    - Merged base scenarios, aggregation scripts, docker stats, and latency history visualization.
  - Delivered Deliverables:
    - PRs: 1573, 1577, 1585, 1593, 1597, 1608, 1617
- `vac:2025q3-nim-libp2p-testing:rendezvous`
  - Overview:
    - Refactored rendezvous tests, fixed pagination issues, and started new scenario coverage.
  - Delivered Deliverables:
    - PRs: 1644, 1646
- `vac:2025q3-nim-libp2p-testing:yamux`
  - Overview:
    - Added header and frame handling tests before yamux deprecation notice.
  - Delivered Deliverables:
    - PRs: 1625, 1634
- `keycard:2025q3-keycard-testing:shell-tests`
  - Overview:
    - Completed single-chain, multichain, and OS v0.10 wallet tests with SLIP39 verification.
  - Delivered Deliverables:
    - Reports: Keycard Shell Test Results, 3rd Party Wallet Smoke Test, SLIP39 Tests
- `status:2025q3-status-qa-desktop:maintenance`
  - Overview:
    - Fixed failing tests, added Windows CI support, improved load time measurement, and cleaned backlog.
  - Delivered Deliverables:
    - PRs: 18445, 18470, 18672, 18603, 18574, 18735, 18726
- `status:2025q3-status-qa-desktop:release-testing`
  - Overview:
    - Supported releases 2.35/2.36, validated Nwaku builds, monitored crashes, tested fixes.
  - Delivered Deliverables:
    - Issues: 18458, 18471, 18503, 18522, 18524, 18555, 18569, 18601
    - PRs: 18532, 18539, 18558, 18495
- `status:2025q3-status-qa-desktop:app-load-time`
  - Overview:
    - Added initial wallet loading time measurement tests.
  - Delivered Deliverables:
    - PRs: 18592
- `status:2025q3-status-qa-mobile:framework-adjustments`
  - Overview:
    - Developed Appium framework, CI integration, accessibility hooks, and recovery phrase fixtures.
  - Delivered Deliverables:
    - PRs: 18366, 18670, 18698
- `status:2025q3-status-qa-documentation:requirements-framework`
  - Overview:
    - Built initial data model for headless CMS-based requirements tracking.
- `admin/misc`
  - Overview:
    - Managed hiring pipeline, interviews, planning, and OOO scheduling.
  - Delivered Deliverables:
    - OOO: 24 CC Days

### DST §

#### highlights §

- Discovered a bug in Grafana thanks fo Infra team
- Discovered issue in Status functional tests
- Created docker utility for nwaku interaction
- Started working on a libp2p cross implementation repository

#### report §

- `admin/misc`
  - Overview
    - 2 sick leave days from CCs
    - 7 OOO days from CCs
    - Meetings with new CC to explain DST workflow
    - Cleared Grafana dashboards, discovered Grafana but with infra team
      - Github issue in Grafana repo not created yet because lack of time.
      - Related issues for track:
        - Github: Issue
        - Github: Issue
    - Call with Waku for setting Tailscale + Grafana + Victorialogs
    - Create DST Github Timeline 2025Q3 for tracking task dates.
    - Call with Status from Status to check status scalability
      - Discussed several follow ups
      - Discovered issues in Status functional tests
    - Created lab usage information notion page
    - Published research blog on GossipSub improvements comparison
    - Created requested VM for ACZ
    - Created job description for DevOps
    - Call with Codex team
      - Discussed differences between both frameworks, and approaches that could be taken
      - Created notion document for next steps on the framework
    - Coordinate with Nescience to use this machine next week
    - Track gossipsub metrics spec draft
  - Delivered deliverables
    - Github: DST Timeline
    - Notion: Lab usage information notion page
    - Vac.dev: GossipSub improvements comparison
    - Notion: Workflow Document
    - Github PR: Keys for ACZ in DST machine
  - Closed tasks
    - No closed tasks
- `vac:dst:ift:2025q3-dst-research-destination`
  - Overview
    - Worked on EF proposal:
      - Add comparisons of Shadow and Kurtosis. Testground still missing.
      - Add another DST CC, and some links with his work
      - Answered some doc comments
  - Delivered deliverables
  - Closed tasks
- `vac:dst:vac:2025q3-libp2p-evaluation`
  - Overview
    - Regression analysis for nim-libp2p 1.12
      - Bandwidth weird patterns helped discover lab inestabilities again
      - Bandwidth measurements are not accurate because of this
      - Still can be checked that Quic is not fully stable yet
    - Started second Mix analysis
  - Delivered deliverables
    - Notion: nim-libp2p v1.12 Report
    - Github commit: Fix for build docker
    - Github PR: DRAFT mix node deployment changes
  - Closed tasks
    - `vac:dst:vac:2025q3-libp2p-evaluation:regression-testing`
    - `vac:dst:vac:2025q3-libp2p-evaluation:evaluate-quic-v0.2.9`
- `vac:dst:waku:2025q3-waku-evaluation`
  - Overview
    - Analyze discv5 usage from waku. Not as high as initially expected.
    - Discovered discrepancies in store protocol when hitting messages endpoint (PEER_DIAL_FAILURE).
    - Upgraded `getEnr.tpl` and `getAddress.tpl` so it can be used to generate k8s deployment template for jswaku
  - Delivered deliverables
    - Notion: Nwaku 0.36 discv5 analysis
    - Github: Issue - PEER_DIAL_FAILURE
    - Github Issue: jswaku nodes don’t connect to peers
    - Github PR: lightpush client and getAddress fixes
  - Closed tasks
    - `vac:dst:waku:2025q3-waku-evaluation:regression-testing`
    - `vac:dst:waku:2025q3-waku-evaluation:discv5-feasibility-comparison`
    - `vac:dst:waku:2025q3-waku-evaluation:store-dial-failure-followup`
    - `vac:dst:waku:2025q3-waku-evaluation:js-waku`
- `vac:dst:waku:2025q3-dst-tooling`
  - Overview
    - Added logging of events to experiments framework and use it to automatically generate time intervals for analysis script
    - Changed requirements for uv in 10ksim repo
      - Removed unused functionalities
    - Improved special character replacement when doing queries
    - Update getenr version to support quering different services
    - Moved waku request functionalities to a new repository
      - Add debug mode for message store requester
    - Added Events logging
    - Working on shadow integration in workflow
      - Shadow test runs with both, docker executable and build method
  - Delivered deliverables
    - Github PR: Logging events
    - Github PR: UV
    - Github PR: Better query parsing
    - Github PR: Update getenr
    - Github PR: msg_retriever debug mode
    - Github repo: Pod requester
    - Github PR: Events logging
    - Github PR: Reorganize repo
    - Github PR: Organize experiment output better
    - Github PR: BaseExperiment deploy
    - Github PR: Events refactor
    - Github PR: Add cls.name when registering experiments
    - Github repo: libp2p cross-implementation nodes
  - Closed tasks
    - `vac:dst:waku:2025q3-dst-tooling:general-tooling` (recurring)
    - `vac:dst:ift:2025q3-dst-tooling:python-uv`
    - `vac:dst:ift:2025q3-dst-tooling:improve-tooling`
    - `vac:dst:ift:2025q3-dst-tooling:shadow-integration-scaffold`
    - `vac:dst:ift:2025q3-dst-tooling:workdir-experiments-track`
    - `vac:dst:ift:2025q3-dst-tooling:deployment-updates`
- `vac:dst:status:2025q3-status-go-chat-protocol-benchmarks`
  - Overview
    - Status-waku discovered an issue with bootstraping
      - Call with waku to debug issue, and analyzed behavior depending on how waku is connected.
      - Confirmed that peers added through `staticnode` argument are not exposed to be discovered even they have discv5 enabled.
      - Discussions and troubleshooting to help status
  - Delivered deliverables
    - Github Issue by Status
  - Closed tasks
    - `vac:dst:status:2025q3-status-go-chat-protocol-benchmarks:delay-and-store`

### SC §

#### highlights §

- Participated in 2 contests, lots of learnings
- Moved StatusL2 contract to mono repo
- Certora alternative research ongoing

#### report §

- `ift:2025q3-security-audits`
  - Participated in two public audit contests
  - Learnings were turned into a learnup session
  - Completed tasks
    - This is ongoing
  - Deliverables
    - LearnUp Session on Lending Protocols
- `status:2025q3-maintaining-status-contracts`
  - Moved StatusL2 related contracts to status network monorepo
  - Implemented various features and fixes in the staking protocol
  - Completed tasks
    - No concrete tasks were planned
  - Deliverables
    - No concrete deliverables were planned
- `ift:2025q3-sc-learnup-sessions`
  - Held and recorded learn up session on Understanding Lending protocls
  - Completed tasks
    - `ift:2025q3-sc-learnup-sessions:2025-08`
  - Deliverables
    - Video Recording of LearnUp Session
- `ift:2025q3-fv-tools-research`
  - Researched alternatives for Certora as a tool for formal verification
  - Tried out “Kontrol” and ran quickly into issues and limitations
  - Also played around with selfhosted open source version of Certora
  - So far, verdict is to use OSS Certora locally for quick runs and use SaaS for debugging
  - We’re creating a document with the results
  - Completed tasks
    - This is not done, but rather ongoing
  - Deliverables
    - Document with results not yet finished

### ACZ §

#### highlights §

- Released first version of de-MLS RFC
- Improved CONTRIBUTING.md for zerokit by an external PR
- Released Zerokit performance blog post: Zerokit optimizations: A performance journey

#### report §

- `ift:2025q3-de-mls-testnet`

  - Overview:
    - Implemented hashlike consensus for de-MLS
    - Improved CONTRIBUTING.md for zerokit by an external PR
  - Delivered deliverables:
    - chore: implement consensus mechanism #43
    - docs: add comprehensive CONTRIBUTING.md with contributing guidelines #331
    - VAC/RAW/ ETH-MLS-OFFCHAIN RFC PR #166
  - Completed tasks:

- `ift:2025q3-zerokit`

  - Overview:
    - Improved CI for zerokit
    - Improved parallelizm in wasm
    - Started to integrate big-endian (BE) support
    - Update docs for merkle tree for zerokit
    - Released zerokit performance improvement blog post
  - Delivered deliverables:
    - feat: support feature-specific binary generation PR#326
    - feat: add wasm parallel testcase PR#328
    - feat: bump rayon version, parallel feature flag PR#4
    - feat: resolve overlap between stateless and merkletree feature flags #329
    - feat(rln): add big endian support for the whole API #330
    - feat(rln-wasm-utils): extracting the generation and hash functions into a separate module #332
    - chore: consistent naming and update docs for merkle trees #333
    - Zerokit optimizations: A performance journey
  - Completed tasks:
    - `ift:2025q3-zerokit:ci-revising`
    - `ift:2025q3-zerokit:rln-wasm-maintaining`
    - `ift:2025q3-zerokit:merkle-tree-revising`

- `ift:2025q3-rln-status-l2`

  - Overview:
    - Tested smart contract intections with prover
    - Tested e2e functionality
    - Maintain rln-prover repo with CI workflow, update Zerokit version
    - Began work on stress testing the prover module for shadow benchmarking
    - Drafted decentralizes slashing document
  - Delivered deliverables:
    - Test and fix smart contract interaction #24
    - Update for new KarmaTiers smart contract #23
    - Extend testcase timeout to prevent panic, seperate anvil feature for testcase. PR #28
    - Use exact zerokit version, move common deps to workspace, remove unuse deps to reduce build size PR #30
    - Add zeroize support for private key PR #27
    - Add throughput measurement for prover benchmark PR #22
    - Split unit tests in several new files PR #21
    - Decentralized slashing document
  - Completed tasks:
    - `ift:2025q3-rln-status-l2:sc-testing`
    - `ift:2025q3-rln-status-l2:track-and-monitor`
    - `ift:2025q3-rln-status-l2:profiling`

- `ift:2025q3-ift-zk-calls`

  - Overview:
    - August IFT ZK Call is conducted
  - Delivered deliverables:
    - Presentation record
    - Forum post
  - Completed tasks:
    - `ift:2025q3-ift-zk-calls:ift-zk-call-2`

- `ift:2025q3-libp2p-mix-testnet`

  - Overview:
    - Resuming updating libp2p-mix RFC
    - Resuming consulting P2P team
    - Identifying the requirements for multi-SURB
  - Delivered deliverables:
    - Support for Anonymous Replies Using SURBs issue #41
  - Completed tasks:

- `nes:2025q3-nescience-consulting`

  - Overview:
    - Finished specs for key protocol
    - Deliver cosmos-l2-feasibility zone document
    - Started to work on deep dive existing project
  - Delivered deliverables:
    - Concrete key protocol specifications
    - NSSA as a Cosmos Zone
  - Completed tasks:
    - `nes:2025q3-nescience-consulting:key-protocol-spec`
    - `nes:2025q3-nescience-consulting:cosmos-l2-feasibility`

- `nomos:2025q3-nomos-consulting`

  - Overview:
    - Review Nomos doc for total stake
  - Delivered deliverables:
    - Total Stake Inference Analysis
  - Completed tasks:
    - `nomos:2025q3-nomos-consulting:zk-consulting-nomos-2`

### RFC §

#### highlights §

- Merged the first batch of Nomos specs.
- Started hands-on work on first Codex specs.
- Started work on Logos POCs.

#### report §

- `vac:rfc:waku:2025q3-rfc-iteration`
  - Overview:
    - Work in progress, business as usual: current scope qaku and maintenance of other specs.
    - Created a list of Waku specs for q4: 21/WAKU2-FAULT-TOLERANT-STORE, 34/WAKU2-PEER-EXCHANGE, WAKU2-NOISE-SESSIONS, WAKU2-NOISE
  - Delivered Deliverables:
    - `vac:rfc:waku:2025q3-rfc-iteration:rln-keystore`
- `vac:rfc:codex:2025q3-rfc-iteration`
  - Overview:
    - Started reviewing the new codex specs, right now focus on Slot-builder and DHT
  - Delivered deliverables:
    - WIP
- `vac:rfc:nomos:2025q3-rfc-iteration
  - Overview:
    - Completed and merged the initial batch of specs, now focusing on full v1.
  - Delivered Deliverables:
    - `vac:rfc:nomos:2025q3-rfc-iteration:da-network`
    - `vac:rfc:nomos:2025q3-rfc-iteration:p2p-network`
    - `vac:rfc:nomos:2025q3-rfc-iteration:hardware-requirements`
    - `vac:rfc:nomos:2025q3-rfc-iteration:da-encoding`
    - `vac:rfc:nomos:2025q3-rfc-iteration:sdp`
    - `vac:rfc:nomos:2025q3-rfc-iteration:mantle-digital-signature`
- `vac:rfc:logos:2025q3-rfc-iteration:logos-pocs`
  - Overview:
    - Started reading the documentation and creating a wireframe according to COSS.
  - Delivered deliverables:
    - [WIP] https://github.com/logos-co/logos-core-poc/blob/develop/docs/specs.md
- `admin-misc`
  - 1 CC OOO for 10 days.

### Nim §

#### highlights §

#### report §

- `ift:2025q3-nimble`

  - Overview:
    - All work below is towards the road to Nimble version 1.0.0.
  - Delivered deliverables:
    - https://github.com/nim-lang/nimble/pull/1431
    - https://github.com/status-im/nimbus-build-system/pull/106
    - https://github.com/nim-lang/nimble/pull/1431
    - https://github.com/nim-lang/nimble/pull/1433
    - https://github.com/nim-lang/nimble/pull/1435
    - https://github.com/nim-lang/nimble/pull/1436
    - https://github.com/nim-lang/nimble/pull/1437
    - https://github.com/nim-lang/nimble/pull/1439
    - https://github.com/nim-lang/nimble/pull/1440
    - https://github.com/nim-lang/nimble/pull/1441
    - https://github.com/nim-lang/nimble/pull/1442
    - https://github.com/nim-lang/nimble/pull/1443
    - https://github.com/nim-lang/nimble/pull/1446
    - https://github.com/nim-lang/nimble/pull/1448
    - https://github.com/nim-lang/nimble/issues/1449
    - https://github.com/nim-lang/nimble/pull/1452
    - https://github.com/nim-lang/nimble/pull/1453
    - https://github.com/nim-lang/nimble/pull/1457

- `vac:nim:ift:2025q3-nim-core-libs:nim-cbor-serialization`

  - Overview:
    - New CC joined to work on Nim Core Libs, initial focus on nim-cbor-serialization.
    - Setup CI workflow: tests, nph lint
    - Added docs, book, examples
    - Plugable bignum support
    - Refactored bigints into a plugin
    - Added missing `CborRaw` type to parse/write raw CBOR data
  - Delivered deliverables:
    - https://github.com/vacp2p/nim-cbor-serialization/pull/1

### Security §

#### highlights §

- Reviewed and updated the Master Wallet Index repository
- Created a Signing Account Index
- Reviewed and updated the Multisig Owner Addition Process
- Removed users and groups no longer needed in critical services and apps
- Shared web3 news about crime, phishing, malware, hacks and IoC with Finance
- Started integrating the multisig wallet validator to n8n
- Finalized workflows and tests for log extraction from Google and Github
- Finalized workflows for verifying inactive users from Google, Github, Notion, Discord
- Updated IR runbooks with a “first-hour” response checklist for phishing incidents
- Conducted a short tabletop exercise with key stakeholders simulating a wallet compromise scenario
- Investigated new bug bounty submissions with PoC validation against staging environment
- Wrote and shared mid-cycle summary of remediations (including trends, blockers, progress rate)
- Performed secure code review on the latest Status wallet PRs focusing on authentication, key management, and storage handling
- Cross-checked implemented fixes from last quarter’s review against current codebase for regressions

#### report §

- `ift:2025q3-secure-treasury-management:wallet-policy-update`

  - Revalidate, update and/or create policies, processes and procedures around web3 security and wallet management
  - Output:
    - Created a Signing Account Index
    - Created a Signatory Onboarding Process (Identity Verification)
    - Reviewed and updated Multisig Owner Addition Process (Signing Accounts)
    - Reviewed and updated the Master Wallet Index reposiroty (Org Wallets Index)
    - Started updating/creating backup and recovery policies and processes
  - Tasks:
    - `ift:2025q3-wallet-policy-update:write-and-review-new-version`
    - `ift:2025q3-wallet-policy-update:backup-and-recovery-policies`

- `ift:2025q3-secure-treasury-management:multisig-secondary-interface-deployment`

  - Avoid having a unique interface to access multisig wallets and lose access to funds in case of outage of the primary UI
  - Output:
    - Used Onchain Den with real transactions
    - Wrote guidelines and procedures for backup and recovery, including the use of Onchain Den when needed
  - Tasks:
    - `ift:2025q3-multisig-secondary-interface-deployment:test-new-interfaces`
    - `ift:2025q3-multisig-secondary-interface-deployment:write-guides-and-best-practices`

- `ift:2025q3-training-and-awareness-program:web3-security-guidelines`

  - Provide security guidelines and best practices about web3 and wallet management
  - Output:
    - Prepared web3 education material to be shared across the org (1st wave: Finance and POps)
    - Shared web3 news about crime, phishing, malware, hacks and IoC with Finance
    - Continued testing the integration of n8n with AI Agents and BlockThreat to feed security news across the org
  - Tasks:
    - `ift:2025q3-awareness-program:web3-security-essentials`
    - `ift:2025q3-security-workflow-automation:feed-web3-news-automatically`

- `ift:2025q3-security-workflow-automation`

  - Design, deploy and maintain automated workflows to support critical Security Ops and procedures
  - Output:
    - Started integrating the multisig wallet validator to n8n
    - Etherscan API integration
    - Started python script inclusion, dependence on Python n8n docker
    - Continue workflow development for web3 security alerts (n8n with AI Agent + BlockThreat)
      - Added social media feeds
      - Tested AI Prompts
  - Tasks:
    - `ift:2025q3-security-automation:automatic-wallet-index-updates`
    - `ift:2025q3-security-workflow-automation:feed-web3-news-automatically`

- `ift:2025q3-iam-operations`

  - Mediate access to DeFi protocols and smart contracts to Investment Roles
  - Remove users and groups no longer needed in critical services and apps
  - Output:
    - Removed users no longer needed in Github
    - Removed users no longer needed in Google
    - Removed users no longer needed in Notion
    - Finalized workflows and tests for log extraction from Google and Github
    - Finalized workflows and tests for identifying, verifying leavers from systems
    - Finalized workflows for verifying inactive users from Google, Github, Notion, Discord
    - Added reporting and notifications for inactive Notion & Google users
  - Tasks:
    - `ift:2025q3-iam-operations:remove-unnecessary-users`
    - `ift:2025q3-security-automation:access-revalidation`

- `ift:2025q3-incident-response-and-vulnerability-management`

  - Identify, assess, prioritize, and mitigate security vulnerabilities across the org infrastructure and programs.
  - Identify, respond to, and resolve security incidents, with clear communication, ensuring minimal disruption to business operations.
  - Output:
    - Collected and archived phishing-related artifacts (email headers, wallet activity logs, message history)
    - Performed log correlation analysis to detect possible secondary targets from the SNT phishing incident
    - Run endpoint scans on affected accounts/devices to validate containment of potential compromise
    - Updated IR runbooks with a “first-hour” response checklist for phishing incidents
    - Conducted a short tabletop exercise with key stakeholders simulating a wallet compromise scenario
    - Investigated new bug bounty submissions with PoC validation against staging environment
    - Manually validated top 10 unresolved CodeQL alerts across 3 repos and flag false positives
    - Wrote and shared mid-cycle summary of remediations (including trends, blockers, progress rate)
    - Run a targeted static analysis review for crypto-related vulnerabilities across top repositories
    - Verified recent CodeQL fixes were deployed in production and covered by CI security tests
    - Cross-checked static analysis findings against runtime logs to confirm exploitability
    - Coordinated with repo owners to close at atleast top 5 high/medium security issues by hands-on patch review
  - Tasks:
    - `ift:2025q3-security-operations:incident-response`
    - `ift:2025q3-security-operations:vulnerability-management`
    - `ift:2025q3-vulma-and-ir:remediation-tracking`

- `ift:2025q3-cicd-security-improvement`

- `ift:2025q3-threat-modelling-and architecture-design-reviews`

  - Review security requirements and protocols in the design and architecture of software
  - Output:
    - Manually traced CI/CD boundaries across top-5 components and linked security gaps (Dependabot/CodeQL)
    - Open tracking issues for each identified architecture concern needing mitigation
    - Performed secure code review on the latest Status wallet PRs focusing on authentication, key management, and storage handling
    - Cross-checked implemented fixes from last quarter’s review against current codebase for regressions
    - Audited CI pipeline secrets usage and validate enforcement of rotation policies
    - Held architecture discussion with Status team on wallet security design and integration boundaries
    - Deep dive secure code review on new Status browser and messaging PRs (focus: encryption, IPC, storage access)
    - Manually tested wallet PRs for insecure key handling or bypass of authentication logic
    - Reviewed CI/CD pipeline configs for provisioned token scopes and improper access permissions
  - Tasks:
    - `ift:2025q2-cicd-security-review:status-design-reviews`

- `ift:2025q3-finance-workflow-automation`

  - Develop and/or support with development of new automations for Finance.
  - Output:
    - Followed-up on changes to Expensify PO process
    - Verified changes in Iplicit API - impact on data synch
    - Continued improvement lists for finance processes
    - Mass PO improvements
  - Tasks:
    - `ift:2025q3-finance-automation`

### Nescience §

#### Highlights §

- Defined NSSA v0.1 protocol specs.
- Defined NSSA sequencer specs.
- Worked on R0 encryption demos.
- Designed Token Program and native token for NSSA.
- Improved our key protocol.
- Worked on implementing wallet extraction.
- 80% of the specs were implemented.
- 80% of the key protocol was implemented.
- Result-wise, we have defined and implemented the first version of the specs and improved our code. This Sprint helped us improve our architecture, with the possibility to have a first testnet prior to the deadline.

#### Report §

- `vac:nes:state-separation-architecture-poc`

  - Overview:

    - Research-wise, we:
      - Investigated and defined NSSA v0.1 protocol specs including types, accounts, programs, transactions’ structure, and state transitions.
      - Investigated and defined NSSA sequencer specs including the block assembly process, the block structure and types, and the criteria for a well-formed block. All with pseudocode.
      - Worked on and implemented different types of cipher stream needed for the protocol using R0, including Chacha20 and Shake256.
      - Designed the Token Program for NSSA and native Token. This includes the token creation and supply, the transfer logic, and the account types.
      - Drafted a first version of the fee mechanism for NSSA.
      - Improved our key protocol by updating some data.
    - Engineering-wise, we implemented:
      - Node refactor.
      - Wallet extraction.
      - Structural improvements.
      - Protocol public state and private state.
      - 80% of the sequencer specs.
      - 80% of the key protocol.
      - R0 encryption demos.

  - List of deliverables (ordered as in task management):

    - NSSA v0.1 specs
    - Sequencer specs
    - Sequencer pseudocode
    - Token Program design
    - Native token
    - Fee mechanism
    - Data storage removal and node refactor
    - Implement NSSA v0.1 Public State
    - Wallet CLI extension
    - Structural improvements
    - Implement NSSA v0.1 Private State
    - Key protocol update public part
    - Sequencer specs implementation
    - Chacha20 in R0
    - Shake256 in R0

  - Completed tasks (big tasks):

    - `vac:nes:2025q2:state-separation-architecture-poc:specs`
    - `vac:nes:2025q2:state-separation-architecture-poc:swallet`
    - `vac:nes:2025q2:state-separation-architecture-poc:token-design`
    - `vac:nes:2025q2:state-separation-architecture-poc:specs-impl`
    - `vac:nes:2025q2:state-separation-architecture-poc:fee`