# ElizaOS Development Report - December 7-8, 2025

## Security Incident and Response

- ElizaOS website was compromised by a cryptocurrency miner on December 8th
- Team identified vulnerability in Next.js version 15.3.1 with multiple critical security flaws including RCE vulnerabilities
- Site was taken down, cleaned, and redeployed with updated dependencies including Next.js 16.0.7
- Bounty of $100 was offered to developers who could identify the security flaw, with an additional $1,000 in ELIZAOS tokens for solutions within 2 hours

## Strategic Planning

- Comprehensive roadmap for Eliza Labs was shared with the community
- Roadmap is hosted on Notion as a living document for team member comments
- Team planned a session to discuss the roadmap before the Christmas break
- Roadmap emphasizes vision for proactive, persistent, and self-directed AI agents

## Technical Development

### Core Platform Updates

- Pull request submitted to bump dependencies and fix drizzle-kit compatibility issues across the ecosystem
- Resolved conflicting drizzle-orm versions across the monorepo
- Work progressed on streaming functionality for the platform
- Version 1.6.5 was considered for labeling as 1.7.0 due to significant changes

### Streaming Capabilities

- New pull requests opened for streaming support across multiple plugins:
  - OpenRouter plugin (elizaos-plugins/plugin-openrouter#21)
  - OpenAI plugin (elizaos-plugins/plugin-openai#21)
  - Anthropic plugin (elizaos-plugins/plugin-anthropic#12)
- Core eliza repository pull request (elizaos/eliza#6212) opened to enhance text generation streaming

### Features in Development

- ElizaOS as MCP (Model Context Protocol)
- Streaming capabilities implementation

### Issue Resolutions

- Closed issue regarding .eliza files for plugin-sql functionality (elizaos/eliza#6204), previously fixed in alpha version
- Closed inquiry about using Deepseek API (elizaos/eliza#6156), confirmed it can be used with plugin-openrouter by configuring custom models

## Technical Support and Documentation

- Code examples provided from Otaku project showing how to implement custom REST API endpoints
- Confirmed capabilities for extending PostgreSQL databases to work with ElizaOS core SQL plugin
- Team suggested data engineering approaches for gathering market data and news

## Community Engagement

### Migration and Token Discussions

- Active discussion (elizaos/eliza#6158) continued regarding snapshot eligibility for tokens held in Tangem wallets
- New issue (elizaos/eliza#6211) opened detailing AI16Z to ElizaOS migration process and snapshot eligibility criteria
- Team explained price movements are affected by seller/buyer ratios, decreasing volume, and ongoing migration process
- Infrastructure reported as 10x better than previous versions

### Exchange Updates

- Kraken sent emails to ai16z holders stating they are considering migration
- Team confirmed project is listed on top exchanges according to CoinGecko
- Team continues working on recovering the main ElizaOS X/Twitter account

## Hardware and Self-Hosting

- Community members shared successful implementation of ElizaOS with GPT-OSS 120B on GMKTEC EVO-X2 with 128GB RAM
- Strix Halo mini PC recommended as affordable option for running larger models
- Community member described extensive home server setup including 30 GPUs of various models

## Industry Insights Shared

- Video shared about China's Bettafish AI system analyzing 1.4 billion people through social media platforms
- Video shared about ByteDance's Doubao AI agent integrated into Android at OS level on ZTE's Nubia M153 prototype