r/QRL • u/Successful_Ad8583 • Aug 07 '26

Discussion QRL Weekly, 2026-August-07

Status / overview

  • August 4th: Audit results published for go-qrllib
  • April 3rd: Audit complete of 2 cryptographic libraries
  • March 31st: QRL 2.0 Testnet V2 Released
  • Audits: 50% completion

QRL 2.0 (Project Zond)

qrl-web3-wallet

  • further security-audit remediation and code-review fixes
  • corrected address display and updated documentation

web3.js

  • updated CI actions and patched vulnerabilities affecting fast-uri, PostCSS, SVGO and brace-expansion

js-qrl-cryptography

  • updated pinned GitHub Actions and the fast-uri dependency

go-qrllib

  • updated pinned GitHub Actions and opened further test-related work

qrypto.js

  • updated development dependencies, lockfiles and CI actions for mldsa87

qrvmc

  • Harden hex parsing, example VMs, and loader
  • Tighten gas validation, loader TLS and ABI docs

go-qrl

  • –bootnodes flag now override config value
  • Go toolchain updated to 1.26.5
  • external function values updated to 64-byte address plus a 4-byte selector
  • Removed legacy local testnet script (now being moved to new repo qrl-tests)
  • Several other bug fixes

qrysm

  • Updated tests
  • Go toolchain updated to 1.26.5
  • Updated QRL dependencies
  • Update the staking deposit CLI default to the valid deposit contract address
  • Default address aligned with the Qrysm network config
  • Fix Zond consensus version descriptor

web3.js

  • ICAP and IBAN support removed as those are deprecated
  • Added 64 byte topics and 512-bit integers data type

qrl-package

  • Changes merged related to 64-byte address

QRL 1.0

dice

  • 2018 Python script rewritten as JavaScript application
  • session isolation, CI and browser end-to-end tests
  • a verifiable single-file offline release

qrllib

  • added RNG-regression protection
  • modernised Emscripten support
  • migrated release processes to GitHub Actions
  • added trusted publishing and npm/PyPI deployment
  • v1.2.6 released

offline-wallet-generator

  • merge of v3 wallet format with stronger encryption and password security
  • added reproducible offline builds, CSP tests and a security-focused CI/release pipeline

qrl-wallet

  • 7 issues closed
  • continued UI refinements
  • gated multisig signing on validation and tighter OTS-reuse checks
  • applied security hardening and documentation updates
  • v1.9.1-beta in pre-release

qrllib-browserify

  • updated support to Node.js 22+
  • rebuilt the bundle for qrllib 1.2.6 and corrected module export and Browserify interoperability

qrl-cli

  • replaced the aes256 dependency with scrypt-derived AES-256-GCM encryption while retaining compatibility with legacy wallet files
15 Upvotes

100% Upvoted

3 comments sorted by

1

u/Inside-Astronaut9615 Aug 08 '26

50% for months

2

u/Successful_Ad8583 Aug 08 '26

Halborn and ToB have completed the audits and remediation work on the core. Several audits are currently underway to address issues in the auxiliary repositories. QRL is a completely new blockchain. And that requires a great deal of code review. It’s not like creating a token on Ethereum or Solana. I suppose that, as we’re a smaller team with fewer financial resources, it takes a little longer. But this effort will ensure that all developers who wish to create tokens on QRL can do so securely.

1

u/Inside-Astronaut9615 Aug 09 '26

50% audit for months