From 686a19dcf2877600bd221adbd5b82e63f9e73141 Mon Sep 17 00:00:00 2001 From: fbarbu15 Date: Tue, 23 Dec 2025 11:52:50 +0200 Subject: [PATCH] chore: weekly updates 2025 12 22 (#362) --- content/weeklies/2025-12-22.md | 421 +++++++++++++++++++++++++++++++++ 1 file changed, 421 insertions(+) create mode 100644 content/weeklies/2025-12-22.md diff --git a/content/weeklies/2025-12-22.md b/content/weeklies/2025-12-22.md new file mode 100644 index 000000000..3b4dc4e5a --- /dev/null +++ b/content/weeklies/2025-12-22.md @@ -0,0 +1,421 @@ +--- +title: 2025-12-22 Vac weekly +tags: + - vac-updates +date: 2025-12-22 +lastmod: 2025-12-22 +draft: false +--- + +## Vac 2025/12/22 +### highlights +- BI: Finance dashboard data transformation completed, with Etherscan fixes and Bitcoin extraction added. +- BI: GitHub extraction updates aligned dashboards with the new repository organization. +- BI: Logos website GitHub participation endpoint delivered and circle data issues fixed. +- BI: LLM RAG context update work started, with vLLM benchmark scripting underway. +- BI: Comms X analytics extraction updated and Status X tags dashboard refreshed. +- DST: Vaclab 2.0 bandwidth operator PR opened with CRD/controller logic and local tests. +- DST: Vaclab 2.0 bandwidth-aware scheduling documentation published with workflow details and limitations. +- DST: Waku v0.37 bandwidth regression experiments completed and analysis reports updated. +- DST: Waku v0.37 store regression analysis produced a connection-limit impact report. +- DST: JsWaku bootstrapping tests confirmed reconnect propagation within one second after disconnects. +- DST: Libp2p evaluation showed go-libp2p succeeds under conditions where nimlibp2p fails. +- Infra: MEV-Boost metrics and validator performance dashboards advanced for Lido monitoring. +- Infra: Hoodi missing proposal investigation progressed alongside layout fleet update planning. +- Infra: Status App Android and iOS signing pipelines updated and validated. +- Infra: Windows E2E registry issue debugging continued for Status App builds. +- Infra: Waku services updated with `waku.sandbox` enablement and Logos chat node deployment. +- Nescience: AMM-wallet integration PR merged to advance testnet readiness. +- Nescience: Quick deploy implementation merged while testnet machine work progressed. +- Nescience: Sequencer Docker CI build and CI parallelization improvements merged. +- Nescience: CLI and facades unification work started under the nice-to-have track. +- Nescience: LSSA consulting advanced with freeze-authority review and payment-streams documentation. +- Nim: Nimble improvements advanced for lockfile defaults, special versions, and git error reporting. +- Nim: Confutils PRs progressed across obsolete pragma, env var handling, and decoding fixes. +- Nim: Intops refactor progressed with merged PRs, nimibook publication, and benchmark research. +- Nim: Langserver failure diagnosis completed with upstream issue identification. +- P2P: QUIC stabilization continued with lsquic refactors, API exports, and Windows build fixes. +- P2P: C bindings advanced for streams, kademlia, and core APIs across multiple PRs. +- P2P: IPv6 transport support progressed with Linux success and macOS/Windows CI issues noted. +- P2P: Kademlia lookup, data retrieval, and interop improvements landed in nim-libp2p. +- P2P: Maintenance work reduced Docker image size and optimized gossipsub queue limits. +- QA: Status-go token gated community tests advanced for TC 7128 and TC 7129. +- QA: Mix and Kademlia test plan drafts shared for review. +- QA: Status Desktop QA tracked Windows build failures and Aragon permission creation issues. +- QA: Simplify SignalClient work continued for status-go maintenance. +- RFC: RFC index maintenance addressed feedback and open reviews. +- RFC: opChan RFC drafted and ready for review. +- RFC: Cryptarchia fork-choice rule RFC started and in progress. +- RFC: New drafts opened for proof-of-leadership and total stake inference. +- RFC: Website replacement work started and Q4 retro completed. +- SC: StakeManager helper view functions PR progressed. +- SC: MP_APY removal work advanced. +- SC: StakeVault migration safeguards and Emergency Exit/Leave fixes progressed. +- SC: Pause signaling and distributor `isPaused()` changes progressed. +- SC: Karma overslash and claim safety fixes progressed across multiple PRs. +- Security: Endpoint security detection tool evaluation completed with conclusions documented. +- Security: Cold-signing workstation review completed with risks and concerns noted. +- Security: Status Desktop and Wallet reviews completed for cryptography and key handling. +- Security: Vulma/IR incident checks completed across Status, Waku, and VAC repos. +- Security: Remediation tracking advanced for CodeQL findings and security fixes. +- Security: Finance automation testing progressed with new duplicate PO logic. +- TKE: Logos digital twin stock/flow diagrams progressed in Machinations. +- TKE: Realistic transaction demand model completed for stress testing. +- TKE: Karma incentives APY review and SC discussions advanced. +- TKE: Betfundme extension design finalized with implementation details. +- TKE: Q4 retrospective held and next-quarter commitments prepared. +- Web: Status Hub WETH vault enablement progressed alongside TVL debugging on VPN. +- Web: Status Hub post-release fixes shipped, including FAQ and promo bar updates. +- Web: Status web SEO improvements shipped for status.app and status.network. +- Web: Wallet extension token detail performance improved with Suspense and TokenSkeleton. +- Web: Contribution portal UI updates and leaderboard backend work progressed. +- Web: Community dapp shard fixes and Logos site maintenance tasks advanced. + +### vac:bi: +- `vac:bi:ift:2025q4-finance-dashboard` + - Complete data transformation. + - Fix Etherscan data extraction. + - Add Bitcoin extraction. +- `vac:bi:ift:2025q4-github-extractions` + - Update extractions to match new repo organization. +- `vac:bi:logos:2025q4-logos-circle-dashboard` + - Update dashboard following new requests. +- `vac:bi:logos:2025q4-logos-website` + - Provide new data endpoint for GitHub participation. + - Fix circle data. +- `vac:bi:logos:2025q4-logos-funnels` + - Prepare tasks for Q1 2026. + - Dashboard for monitoring `Take Action` clicks on the Logos website. +- `vac:bi:ift:2025q4-llm-rag` + - Start working on context update. + - vLLM test: preparing benchmark script to evaluate models. +- `vac:bi:ift:2025q4-comms-x-analytics` + - Update extraction to match new reorganization. + - Dashboard for [Status X tags](https://grafana.bi.status.im/d/ef79c393sp5hce/status-twitter-tags?orgId=1&from=2025-09-13T00:00:00.000Z&to=2025-12-22T00:00:00.000Z&timezone=UTC). + +### vac:dst: +- `admin/misc` + - Logos blockchain offsite. + - Learn about the testing framework developed by Nomos. + - Deploy testing framework in the lab. + - Plug metrics collection via Prometheus OTLP from Nomos nodes. + - Deploy a small testnet of 100 nodes. + - Start detecting issues in the node. + - Discussed with David what measurements beyond CPU/Mem/Bandwidth to compare with theoretical results. + - [Discord Thread: DST <> Nomos Offsite](https://discord.com/channels/1111286067413405788/1452608952196923402). + - OOO: 2 CC days. +- [`vac:dst:vac:2025q4-libp2p-evaluation:regression-testing`](/dst/vac/2025q4-libp2p-evaluation#regression-testing-recurring) + - Repeat experiments playing with network conditions. + - Go-libp2p works with the same network conditions that make nimlibp2p fail. + - Enhance readiness probes for go-libp2p and rust-libp2p, and Grafana panels. +- [`vac:dst:waku:2025q4-waku-evaluation:nwaku-api-image`](/dst/waku/2025q4-waku-evaluation#nwaku-api-docker-image) + - Appears to be working with JsWaku experiment. +- [`vac:dst:waku:2025q4-waku-scaling:optimise-browser-bootstrapping`](/dst/waku/2025q4-waku-scaling#optimise-browser-bootstrapping) + - Integrated new pod-api-requester image. + - Analysis shows all messages found for all pods even after disconnecting and reconnecting. + - Publish requests under 1 second after reconnect still propagated correctly. + - Work left: cleanup and post PR, report with results for different trials, and run a cold start experiment. +- [`vac:dst:waku:2025q4-waku-evaluation:nwaku-v0.37-bandwidth-regression`](/dst/waku/2025q4-waku-evaluation#nwaku-v037-bandwidth-regression) + - Conducted experiments and updated the analysis report. + - [Notion: Open Streams (1K Relay + 3-Bootstrap Nodes)](https://www.notion.so/Open-Streams-1K-Relay-3-Bootstrap-Nodes-2cc8f96fb65c80cabec6f78196a9c47a?pvs=25). + - [Notion: 1K Relay + 3-Bootstrap Nodes](https://www.notion.so/1K-Relay-3-Bootstrap-Nodes-2bb8f96fb65c8036b66ef85fff17c515). + - [Discord thread](https://discord.com/channels/864066763682218004/1443602126034043071). +- [`vac:dst:waku:2025q4-waku-evaluation:nwaku-v0.37-store-regression`](/dst/waku/2025q4-waku-evaluation#nwaku-v037-store-regression) + - Worked on waku store regression and produced a detailed report on connection-limit impact. + - [Notion: Scenario1 Experiments nwaku:v0.37.1-beta](https://www.notion.so/Scenario1-Experiments-nwaku-v0-37-1-beta-2ca8f96fb65c800c9622f902aeecc89e). + - [Discord thread](https://discord.com/channels/864066763682218004/1446533711028814048). +- [`vac:dst:ift:2025q4-dst-tooling:local-stack-analysis`](/dst/ift/2025q4-dst-tooling#scenario-workflow-manager) + - Used the vaclab-local repo to install Rancher Desktop locally. + - VM issues resolved; will shift to host. + - Made small nim-libp2p refactor node deployments; deployments worked fine. +- [`vac:dst:ift:2025q4-dst-tooling:general-tooling`](/dst/ift/2025q4-dst-tooling#general-tooling-recurring) + - Added a fix for store/filter messages in 10ksim ([10ksim#183](https://github.com/vacp2p/10ksim/pull/183)). +- [`vac:dst:ift:2025q4-dst-lab:lab-duplication`](/dst/ift/2025q4-dst-lab#lab-duplication) + - [vaclab-k8s-plugins#1](https://github.com/vacp2p/vaclab-k8s-plugins/pull/1) opened for the bandwidth operator (CRD/controller, reconciling logic, per-node tracking, scheduler placeholder, README, local tests). + - Released initial documentation on Vaclab 2.0 bandwidth-aware scheduling ([Notion](https://www.notion.so/Vaclab-2-0-Bandwidth-Aware-Scheduling-2d08f96fb65c804eb44fdc7b75e079f9)). + +### vac:infra: +- `lido` + - Adding metrics and dashboard for MEV-Boost. + - Dashboard for validator performance. + - Hoodi missing proposal investigation. + - Proposal of layout fleet update. + - Fix GitHub runners. +- `nimbus` + - Fix Geth-01 memory issue. + - Investigation on Nethermind memory leak. +- `ci` + - Debugging Status App E2E test on Windows issue with registry entries. + - Status-go build debugging. + - Signing Status App Android build, updating pipeline and Docker image. + - Status App iOS signing build: pipeline working. + - Investigation on Nimbus build system for mac cross-compilation compatibility (x86_64 and aarch64). +- `waku` + - Deploying Logos chat node. + - Enabling new `waku.sandbox` protocol. + - Minting tokens for `waku.test` RLN. +- `misc` + - Discord bridge: adding new channel and investigating missing messages. + - Deployment of website dev-rfc.vac.dev. + - Update eth-rpc-proxy to enable Linea and Eth mainnet for sn-api. + - Deploying minutes.logos.co. + - CiviCRM deployment. + +### vac:nescience: +- `state-separation-architecture-poc:testnet-readiness` + - Finalized [lssa#245](https://github.com/logos-blockchain/lssa/pull/245) on AMM-wallet integration. +- `state-separation-architecture-poc:nice-to-have` + - Started [lssa#251](https://github.com/logos-blockchain/lssa/pull/251) on CLI and facades unification. + - Opened and merged [lssa#248](https://github.com/logos-blockchain/lssa/pull/248) for sequencer Docker CI build, removal of `no_docker`, CI parallelization, and other improvements. +- `state-separation-architecture-poc:testnet-machine` + - Merged [lssa#231](https://github.com/logos-blockchain/lssa/pull/231) with quick deploy implementation. +- `other` + - Fixed a RocksDB dependency issue related to macOS builds in [lssa#247](https://github.com/logos-blockchain/lssa/pull/247). +- `vac:acz:nes:2025q4-nescience-consulting:simple-amm` + - Addressed comments for the [AMM PR](https://github.com/logos-blockchain/lssa/pull/152). +- `vac:acz:nes:2025q4-nescience-consulting:non-harden-keys` + - Worked on [lssa#210](https://github.com/logos-blockchain/lssa/issues/210) and [lssa#206](https://github.com/logos-blockchain/lssa/issues/206); discovered key protocol gaps and began a lattice-based document. +- `vac:acz:nes:2025q4-nescience-consulting:freeze-authority` + - Investigated freeze authority in LSSA and prepared a [document](https://www.notion.so/Examination-of-Freeze-Authority-in-LSSA-2ce8f96fb65c8014ab18f56e7cef1a68). +- `vac:acz:nes:2025q4-nescience-consulting:lssav03` + - Addressed comments on [LSSAv0.3](https://www.notion.so/LSSA-v0-3-specifications-2bc8f96fb65c805eab9ce185b5b596ff). +- `vac:acz:nes:2025q4-nescience-consulting:nfts-implementation` + - Cleaned up the [extended token support document](https://www.notion.so/Extended-Token-support-in-LSSA-v0-3-2ce8f96fb65c80659432ea1d6ab94973). +- `vac:acz:nes:2025q4-nescience-consulting:payment-stream-questions` + - Drafted a [Payment Streams questions document](https://www.notion.so/Questions-from-payment-stream-specs-2cb8f96fb65c808b9fcfd0fcddce3f8d). +- `nes:2025q4-nescience-consulting:freeze-authority` + - Started reviewing the [Freeze Authority in LSSA document](https://www.notion.so/Examination-of-Freeze-Authority-in-LSSA-2ce8f96fb65c8014ab18f56e7cef1a68). + +### vac:nim: +- [`vac:nim:ift:2025q4-nimble:nimble-1.0.0`](/nim/ift/2025q4-nimble#nimble-100) + - Track git errors during package discovery and show them with [nimble#1542](https://github.com/nim-lang/nimble/pull/1542). + - Allow Nim special versions in `requires` with [nimble#1539](https://github.com/nim-lang/nimble/pull/1539). + - Fixes tests. + - Adds test: can use `nim#dev` as require. + - Add Nim by default to the lock file with [nimble#1538](https://github.com/nim-lang/nimble/pull/1538). + - Debug CI issues for `results` and `json-rpc`. +- [`vac:nim:ift:2025q4-nim-core-libs:command-line-parsers`](/nim/ift/2025q4-nim-core-libs#command-line-parsers) + - [nim-confutils#136](https://github.com/status-im/nim-confutils/pull/136) Fix #62; add `obsolete` pragma. + - [nim-confutils#133](https://github.com/status-im/nim-confutils/pull/133) Fix #93; no underscore prefix if envVarsPrefix is empty. + - [nim-confutils#135](https://github.com/status-im/nim-confutils/pull/135) Fix #74; envVarsPrefix app file name when not set. + - [nim-confutils#134](https://github.com/status-im/nim-confutils/pull/134) Fix #87; support env var value list. + - [nim-confutils#132](https://github.com/status-im/nim-confutils/pull/132) Allow passing params to file decode. + - [nim-confutils#131](https://github.com/status-im/nim-confutils/pull/131) Include debug arg in help desc only if used. +- `unittest2` + - [nim-unittest2#65](https://github.com/status-im/nim-unittest2/pull/65) Fix print expression content. +- [`vac:nim:ift:2025q4-nim-core-libs:cpu-integer-library`](/nim/ift/2025q4-nim-core-libs#create-standalone-cpu-integer-library) + - Merged pending intops PRs [nim-intops#2](https://github.com/vacp2p/nim-intops/pull/2) and [nim-intops#7](https://github.com/vacp2p/nim-intops/pull/7). + - Updated the PR based on feedback [nim-intops#8](https://github.com/vacp2p/nim-intops/pull/8). + - Add benchmarks. + - Created a nimibook for intops [nim-intops#9](https://github.com/vacp2p/nim-intops/pull/9) and [book](https://vacp2p.github.io/nim-intops/). + - Researched Constantine's benchmarks and the benchy library. +- [`vac:nim:ift:2025q4-nim-ide-tooling:langserver-maintenance`](/nim/ift/2025q4-nim-ide-tooling#langserver-maintenance) + - Found the spot where langserver fails to run for the langserver project ([langserver#376](https://github.com/nim-lang/langserver/issues/376)). +- `misc` + - Read the plan for Q1 ([Discord message](https://discord.com/channels/@me/1439917122783543299/1447975888514977832)). + +### vac:p2p: +- [`vac:p2p:ift:2025q4-nimlibp2p-quic:stabilization`](/p2p/ift/2025q4-nimlibp2p-quic#quic-stabilization) + - [nim-lsquic#40](https://github.com/vacp2p/nim-lsquic/pull/40) fix: use absolute path for Windows assembly. + - [nim-lsquic#38](https://github.com/vacp2p/nim-lsquic/pull/38) chore: use makefile for Windows. + - [nim-libp2p#1876](https://github.com/vacp2p/nim-libp2p/pull/1876) feat(transports): lsquic. + - [nim-lsquic#33](https://github.com/vacp2p/nim-lsquic/pull/33) fix: use quoteShell. + - [nim-lsquic#41](https://github.com/vacp2p/nim-lsquic/pull/41) refactor: simplify ConnectionManager. + - [nim-lsquic#42](https://github.com/vacp2p/nim-lsquic/pull/42) refactor: export everything via API file. + - [nim-lsquic#44](https://github.com/vacp2p/nim-lsquic/pull/44) chore: export via root file. + - [nim-lsquic#43](https://github.com/vacp2p/nim-lsquic/pull/43) chore: remove unused proc `receive`. + - [nim-lsquic#37](https://github.com/vacp2p/nim-lsquic/pull/37) chore: improvements. +- [`vac:p2p:ift:2025q4-nimlibp2p-cbindings:kademlia`](/p2p/ift/2025q4-nimlibp2p-cbindings#kademlia) + - [nim-libp2p#1960](https://github.com/vacp2p/nim-libp2p/pull/1960) feat(cbind): kademlia. +- [`vac:p2p:ift:2025q4-nimlibp2p-cbindings:core`](/p2p/ift/2025q4-nimlibp2p-cbindings#core-bindings) + - [nim-libp2p#1976](https://github.com/vacp2p/nim-libp2p/pull/1976) feat(cbind): stream read/write. + - [nim-libp2p#1977](https://github.com/vacp2p/nim-libp2p/pull/1977) feat(cbind): start/stop providing. + - [nim-libp2p#1974](https://github.com/vacp2p/nim-libp2p/pull/1974) feat(cbind): dialing, opening and closing streams. +- [`vac:p2p:ift:2025q4-nimlibp2p-maintenance:maintenance`](/p2p/ift/2025q4-nimlibp2p-maintenance#maintenance) + - [nim-libp2p#1972](https://github.com/vacp2p/nim-libp2p/pull/1972) chore: reduce size of Docker image. + - [nim-libp2p#1978](https://github.com/vacp2p/nim-libp2p/pull/1978) feat(gossipsub): limit maximum number of elements in the priority queue. + - [nim-libp2p#1934](https://github.com/vacp2p/nim-libp2p/pull/1934) chore: allFuturesThrowing renamed to allFuturesRaising. +- [`vac:p2p:ift:2025q4-nimlibp2p-ipv6:transport`](/p2p/ift/2025q4-nimlibp2p-ipv6#core-transports-tcpquic) + - [nim-lsquic#39](https://github.com/vacp2p/nim-lsquic/pull/39) feat: add support for IPv6. + - [nim-libp2p#1981](https://github.com/vacp2p/nim-libp2p/pull/1981) feat(transport): add IPv6 support for QUIC; works on Linux but CI fails on macOS and Windows (likely chronos). +- [`vac:p2p:ift:2025q4-nimlibp2p-kad-dht:bootstraping-and-lookup`](/p2p/ift/2025q4-nimlibp2p-kad-dht#bootstrapping--lookup-mechanism) + - [nim-libp2p#1982](https://github.com/vacp2p/nim-libp2p/pull/1982) chore(kad): refactor find and lookupstate. +- [`vac:p2p:ift:2025q4-nimlibp2p-kad-dht:data-retrieval`](/p2p/ift/2025q4-nimlibp2p-kad-dht#data-retrieval) + - [nim-libp2p#1980](https://github.com/vacp2p/nim-libp2p/pull/1980) chore(kad): GetProviders retries only failed peers. + - [nim-libp2p#1975](https://github.com/vacp2p/nim-libp2p/pull/1975) chore(kad): iterative get providers. +- [`vac:p2p:ift:2025q4-nimlibp2p-kad-dht:interop`](/p2p/ift/2025q4-nimlibp2p-kad-dht#interop) + - [nim-libp2p#1902](https://github.com/vacp2p/nim-libp2p/pull/1902) chore(kad): interop tests. + +### vac:qa: +- `admin/misc` + - OOO: 5 CC days. +- [`vac:qa:status:2025q4-status-go-functional-testing:wallet`](/qa/status/2025q4-status-go-functional-testing#wallet-features) + - [status-go#7215](https://github.com/status-im/status-go/pull/7215) test: Token gated communities - TC 7128 (in review). + - [status-go#7187](https://github.com/status-im/status-go/pull/7187) test: Token gated communities - TC 7129 - PoC. +- [`vac:qa:vac:2025q4-nim-libp2p-testing:test-plans`](/qa/vac/2025q4-nim-libp2p-testing#test-plans-for-new-features) + - Drafted [Mix test plan](https://www.notion.so/Mix-2cb8f96fb65c80b99b1ccc1181a19666) and [Kademlia test plan](https://www.notion.so/Kademlia-DHT-2ce8f96fb65c808c816ff99d728a6670) for review. +- [`vac:qa:status:2025q4-status-qa-desktop:maintenance`](/qa/status/2025q4-status-qa-desktop#maintenance) + - [status-app#19605](https://github.com/status-im/status-app/pull/19605) DO NOT MERGE: makefile to make Windows great again. + - [status-app#19608](https://github.com/status-im/status-app/issues/19608) Can't build Windows locally. + - [status-app#19597](https://github.com/status-im/status-app/issues/19597) Selecting Aragon token for permission creation fails the process. +- [`vac:qa:status:2025q4-status-go-functional-testing:maintenance`](/qa/status/2025q4-status-go-functional-testing#maintenance) + - [Simplify SignalClient](https://github.com/status-im/status-go/issues/7091) in progress. + +### vac:rfc: +- `admin/misc` + - Started replacement of the old website with a new one. + - Q4 retro held ([Notion](https://www.notion.so/RFC-retro-2025q4-2cb8f96fb65c80a3b9fcf2abcd117cd7)). +- [`vac:rfc:ift:2025q4-rfc-index-maintenance:maintenance`](/rfc/ift/2025q4-rfc-index-maintenance#maintenance) + - Responded to feedback and open reviews. + - Responded to current PRs and resolved comments. +- [`vac:rfc:waku:2025q4-rfc-iteration:opchan`](/rfc/waku/2025q4-rfc-iteration#opchan) + - Worked on opChan RFC, ready for review ([specs#98](https://github.com/logos-messaging/specs/pull/98)). +- [`vac:rfc:nomos:2025q4-rfc-iteration:cryptarchia-fork-choice-rule`](/rfc/nomos/2025q4-rfc-iteration#cryptarchia-fork-choice-rule) + - Started fork choice rule RFC; work in progress. +- [`vac:rfc:nomos:2025q4-rfc-iteration:cryptarchia-proof-of-leadership`](/rfc/nomos/2025q4-rfc-iteration#proof-of-leadership-specification) + - New draft [rfc-index#231](https://github.com/vacp2p/rfc-index/pull/231). +- [`vac:rfc:nomos:2025q4-rfc-iteration:total-stake-inference`](/rfc/nomos/2025q4-rfc-iteration#total-stake-inference) + - New draft [rfc-index#236](https://github.com/vacp2p/rfc-index/pull/236). + +### vac:sc: +- [`vac:sc:status-l2:2025q4-maintaining-status-l2-contracts:maintenance`](/sc/status-l2/2025q4-maintaining-status-l2-contracts#contract-maintenance-recurring) + - [status-network-monorepo#116](https://github.com/status-im/status-network-monorepo/pull/116). + - [audit issue 35](https://github.com/Cyfrin/audit-2025-12-statusl2/issues/35). + - [status-network-monorepo#106](https://github.com/status-im/status-network-monorepo/pull/106) feat(StakeManager): add helper view functions. + - [status-network-monorepo#104](https://github.com/status-im/status-network-monorepo/pull/104) remove MP_APY. + - [status-network-monorepo#105](https://github.com/status-im/status-network-monorepo/pull/105) prohibit StakeVault migration to a vault that has left. + - [status-network-monorepo#109](https://github.com/status-im/status-network-monorepo/pull/109) ensure Emergency Exit and Leave try-catch blocks work even with missing functions or wrong return types. + - [status-network-monorepo#86](https://github.com/status-im/status-network-monorepo/pull/86) fix(StakeVault): disallow migrate to itself. + - [status-network-monorepo#87](https://github.com/status-im/status-network-monorepo/pull/87) fix(StakeManager): allow leave while paused. + - [status-network-monorepo#119](https://github.com/status-im/status-network-monorepo/pull/119) refactor/remove mp vars. + - [status-network-monorepo#121](https://github.com/status-im/status-network-monorepo/pull/121) fix(CI): ignore asm-keccak256 rule in RLN contract. + - [status-network-monorepo#120](https://github.com/status-im/status-network-monorepo/pull/120) fix(StakeManager): signal paused state when emergency mode is enabled. + - [status-network-monorepo#117](https://github.com/status-im/status-network-monorepo/pull/117) feat(IRewardDistributor): introduce `isPaused()`. + - [status-network-monorepo#115](https://github.com/status-im/status-network-monorepo/pull/115) docs: clarify loss of Karma when removing distributors. + - [status-network-monorepo#114](https://github.com/status-im/status-network-monorepo/pull/114) fix(DeployProtocol): ensure simple Karma distributor is whitelisted. + - [status-network-monorepo#113](https://github.com/status-im/status-network-monorepo/pull/113) chore(InitializeKarmaTiers): update script with latest tier values. + - [status-network-monorepo#112](https://github.com/status-im/status-network-monorepo/pull/112) fix(StakeManager): prevent migrating to non-empty vaults. + - [status-network-monorepo#111](https://github.com/status-im/status-network-monorepo/pull/111) fix(KarmaAirdrop): prevent claiming attack that blocks accounts. + - [status-network-monorepo#118](https://github.com/status-im/status-network-monorepo/pull/118) chore: make the linter happy. + - [status-network-monorepo#88](https://github.com/status-im/status-network-monorepo/pull/88) feat(StakeManager)!: introduce a per user vault limit. + - [status-network-monorepo#92](https://github.com/status-im/status-network-monorepo/pull/92) fix(Karma): don't overslash when balances are < MIN_SLASH_AMOUNT. + - [status-network-monorepo#96](https://github.com/status-im/status-network-monorepo/pull/96) fix(KarmaAirdrop): ensure claiming isn't possible during pause. + - [status-network-monorepo#95](https://github.com/status-im/status-network-monorepo/pull/95) refactor(MultiplierPointsMath): round MPs up when users unstake. + - [status-network-monorepo#93](https://github.com/status-im/status-network-monorepo/pull/93) refactor(KarmaTiers): remove unnecessary constructor. + - [status-network-monorepo#89](https://github.com/status-im/status-network-monorepo/pull/89) refactor(Karma): rename `onlySlasher` to `onlyAdminOrSlasher` modifier. + - [status-network-monorepo#85](https://github.com/status-im/status-network-monorepo/pull/85) fix(StakeManager)!: don't allow registration of vaults with incorrect owners. + +### vac:sec: +- `ift:2025q4-secure-signing-environment:endpoint-security-evaluation` + - Finished evaluation of detection tools and wrote conclusion. +- `ift:2025q4-secure-signing-environment:build-cold-signing-workstation` + - Wrote reviews and concerns regarding the secure signing environment built. +- `ift:2025q4-treasury-continuity-plan:signing-accounts-revalidation` + - Continued the annual revalidation of signing accounts (request for signing). +- `ift:2025q4-treasury-continuity-plan:implement-backup-requirements` + - Tested local safe environment multisig (prepare tx for rejection). +- `ift:2025q4-cicd-security-review:status-design-reviews` + - Reviewed Status Desktop and Wallet PRs focusing on cryptography usage, key lifecycle handling, and sensitive data flows ([status-go#7214](https://github.com/status-im/status-go/pull/7214), [status-go#7198](https://github.com/status-im/status-go/pull/7198)). + - Validated dApp rendering and navigation changes for origin checks and sandbox assumptions. + - Reviewed NIM message schemas and handlers for strict validation and safe deserialization. + - Audited storage and persistence refactors (Nimbus/Logos/Keycard), including [ERC20 token metadata handling](https://github.com/status-im/status-go/pull/7063). + - Verified build and packaging scripts for hidden dependency additions or unsafe download patterns ([status-go#7127](https://github.com/status-im/status-go/pull/7127)). + - Spot-checked GitHub Actions and CI workflows for permission creep and new secret usage ([secret scanning](https://github.com/status-im/status-go/security/secret-scanning)). +- `ift:2025q4-vulma-and-ir:incidents` + - Reviewed recent commits and release artifacts for supply-chain attack vectors. + - Inspected dependency diffs across Status, Waku, and VAC repos for unexpected changes. + - Confirmed incident-related patches landed cleanly without regressions. + - Performed lightweight forensic review of CI logs for abnormal dependency resolution or build behavior. + - [VAC code scanning issue #2](https://github.com/vacp2p/libp2p-test-plans/security/code-scanning/2). + - [VAC code scanning issue #3](https://github.com/vacp2p/libp2p-test-plans/security/code-scanning/3). + - [VAC code scanning issue #4](https://github.com/vacp2p/libp2p-test-plans/security/code-scanning/4). + - [VAC code scanning issue #6](https://github.com/vacp2p/libp2p-test-plans/security/code-scanning/6). + - [VAC code scanning issue #7](https://github.com/vacp2p/libp2p-test-plans/security/code-scanning/7). +- `ift:2025q4-vulma-and-ir:remediation-tracking` + - Reviewed open CodeQL findings and validated relevance after recent code changes. + - Reviewed security fix PRs to ensure mitigations addressed root causes. + - Identified recurring issue patterns (serialization, parsing, auth) and flagged areas needing structural fixes. + - Verified lockfile updates and version bumps for correctness and cross-repo consistency. + - Paired with maintainers on security-sensitive PRs to unblock reviews and accelerate safe merges. +- `ift:2025q4-finance-automation-enhancements` + - Daily monitor of finance executions. + - Provided support on demand. + - Finalized testing for new PO logic to identify duplicate POs. + - Identified additional use cases and developed logic for them. +- `ift:2025q4-revalidation-of-github-and-discord-handles` + - Tested logic for revalidation. + - Started testing retrieval of missing identifiers by extracting more system data. +- `ift:2025q4-create-hierarchy-boards-in-miro` + - Finalized testing for new boards vs BBHR data (get department data, match vs existing boards, create new board). + - Created accessible subprocess logic for each new board. + - Completed testing for new boards. + +### vac:tke: +- `admin` + - Prepared for and joined the TKE Q4/2025 retrospective meeting. +- `vac:tke:ift:logos-token:logos-digital-twin` + - Continued implementing Logos stock and flow diagrams in Machinations. +- `vac:tke:nomos:stress-test::realistic-tx-model` + - Finalized implementing realistic demand for transactions. +- `vac:tke:ift:support-to-ift-units::ecodev-support` + - Supported EcoDev with Virtuals. + - Synced with EcoDev. +- `vac:tke:ift:support-to-ift-units:reading-by-jarrad` + - Continued reading about virtual worlds and economies. +- `vac:tke:status:karma-incentives` + - Further discussions with SC team. + - Reviewed the APY formula. +- `vac:tke:ift:tokenomics-research-forum:betfundme` + - Continued work and finalized the design of the extension. + - Figured out how to implement within Grantico. +- `vac:tke:annoncomms:services-incentive` + - Reviewed Sergei's RFC. +- `misc` + - Prepared for the retrospective. + - Prepared commitments for next quarter. + - Attended Prague Logos Circle. + - Went through LSSA tutorials. + +### vac:web: +- [`vac:web:status:2025q4-status-app:upgrade-waku`](/web/status/2025q4-status-app#upgrade-waku) + - [community-dapp#119](https://github.com/status-im/community-dapp/pull/119) debugging shards. +- `vac:web:status:2025q4-sn-hub` + - Debugging TVL on VPN ([status-web#902](https://github.com/status-im/status-web/issues/902)). + - [status-web#890](https://github.com/status-im/status-web/pull/890) add pre-deposit disclaimer and legal docs pulling fix. + - Providing source for translation ([status-web messages/ko.json](https://github.com/status-im/status-web/blob/b976bd52a180c4a076cce98aca99b26f83b17593/apps/hub/messages/ko.json)). + - [status-web#893](https://github.com/status-im/status-web/pull/893) redirecting to hub. + - [status-web#898](https://github.com/status-im/status-web/pull/898) enabling WETH vault and quickfixing 0 WETH issue. + - Scoping SDK Q1. + - [status-web#887](https://github.com/status-im/status-web/pull/887) post-release bugfixes and refactor shared components. + - [status-web#891](https://github.com/status-im/status-web/pull/891) add FAQ to pre-deposit page. + - [status-web#897](https://github.com/status-im/status-web/pull/897) add promo bars to status.network and status.app. + - [status-web#901](https://github.com/status-im/status-web/pull/901) update vault card component. +- `vac:web:ift:2025q4-sn-website` + - Providing source for translation ([status.network messages/ko.json](https://github.com/status-im/status-web/blob/4e8270db6b9d5b327c1a814cbdc411fc3b0acf19/apps/status.network/messages/ko.json)). +- `admin/misc` + - [roadmap#345](https://github.com/vacp2p/roadmap/pull/345) addressing feedback on commitments proposal. + - Launching PS website ([Discord](https://discord.com/channels/864066763682218004/1450419130946556016/1450647130501812447)). + - OOO: 1 CC days. +- [`vac:web:ift:2025q4-maintenance:maintenance`](/web/ift/2025q4-maintenance#maintenance) + - [status-web#872](https://github.com/status-im/status-web/pull/872) addressed feedback. + - Change shards for Communities: fix abort error and store data length ([status-web#800](https://github.com/status-im/status-web/issues/800), [community-dapp#120](https://github.com/status-im/community-dapp/pull/120)). + - Update `Take Action` button link to [logos.co/take-action](https://logos.co/take-action) ([logos-press-engine#250](https://github.com/acid-info/logos-press-engine/pull/250)); verify develop deployment. + - [logos-press-engine#249](https://github.com/acid-info/logos-press-engine/pull/249) replace broken link with active Discord link. + - [parallel-society#1](https://github.com/acid-info/parallel-society/pull/1) add Umami analytics script; logo updates and Vercel deployment fixes. +- [`vac:web:status:2025q4-status-website:seo`](/web/status/2025q4-status-website#seo) + - Improved technical SEO for status.app, status.network, and hub.status.network ([status-web#895](https://github.com/status-im/status-web/pull/895)). +- [`vac:web:status:2025q4-status-wallet-extension:price-proxy`](/web/status/2025q4-status-wallet-extension#price-proxy) + - Add Suspense and optimize token detail page loading ([status-web#869](https://github.com/status-im/status-web/pull/869)); implemented TokenSkeleton. +- [`vac:web:ift:2025q4-logos-website:spaces-calendar`](/web/ift/2025q4-logos-website#spaces-calendar) + - Add ChartWithModal component ([admin-acid.logos.co#26](https://github.com/acid-info/admin-acid.logos.co/pull/26)). +- [`vac:web:ift:2025q4-logos-contributions-portal:contributor-directory`](/web/ift/2025q4-logos-contributions-portal#contributor-directory) + - Update font and UI, add document ([contribute.logos.co#28](https://github.com/acid-info/contribute.logos.co/pull/28)). + - Enhance issue fetching via GitHub issue API ([contribute.logos.co#29](https://github.com/acid-info/contribute.logos.co/pull/29/files)). + - Admin-acid backend for the leaderboard ([admin-acid.logos.co#28](https://github.com/acid-info/admin-acid.logos.co/pull/28)). +- [`vac:web:ift:2025q4-logos-website:layout`](/web/ift/2025q4-logos-website#layout) + - Adjust padding for responsive layout in WideMedia ([logos#23](https://github.com/acid-info/logos/pull/23)). + - Update copy writing and content in CMS ([sheet](https://docs.google.com/spreadsheets/d/1uzdD6CA-BaotPJQ9GNGzhkuDkmJauSS1MJvkppeQ84g/edit?gid=0#gid=0)). +- [`vac:web:ift:2025q4-logos-contributions-portal:contribution-guidelines`](/web/ift/2025q4-logos-contributions-portal#contribution-guidelines) + - Fix 404 for other languages ([contribute.logos.co#30](https://github.com/acid-info/contribute.logos.co/pull/30)). +- [`vac:web:ift:2025q4-logos-website:social-proof`](/web/ift/2025q4-logos-website#social-proof) + - Follow up on circles count from [source sheet](https://docs.google.com/spreadsheets/d/1O2lx9QEVTtqqCJtpehbHOVeTFhX9PFnYoLPRlCAqMoE/edit?gid=1479867005#gid=1479867005) and [BI issue 137](https://github.com/status-im/data-docs/issues/137).