# Fact Briefing: 2026-04-19

## Overall Summary
The ElizaOS project is managing critical security vulnerability disclosures while undergoing a major organizational restructuring toward an open contribution model. Development focus has pivoted to the core framework and Milady app, supplemented by extensive dependency maintenance and new commerce plugin proposals.

## Key Facts

- Security researcher kullai privately disclosed multiple vulnerabilities to maintainer odilitime after confirming no official bug bounty exists.
- The Eliza Labs organization was dissolved in favor of a return to the original ai16z open contribution model.
- Core development has been narrowed to the framework and Milady app, with other Labs sub-projects placed on hold.
- A batch of dependency updates was submitted to the core repository including Supabase/Postgres v17.6.1.108 and @types/node v25.6.0.
- The migration period for ai16z tokens on Solana has officially closed with no remaining workarounds for missed deadlines.
- A new integration for Merxex was proposed to enable autonomous agent-to-agent commerce functionality.
- Discord maintainers flagged a fake Solana airdrop impersonating Odilitime as a confirmed phishing scam.
- A shared 'utils/batch-queue' system was implemented in the core framework to optimize high-concurrency tasks.

## Open Questions

- Will there be a formal security vulnerability disclosure guideline established for the project?
- When will regular roadmap updates be resumed on official social channels like X?

## Categories

### Twitter News Highlights
- The ElizaOS official X account has been inactive for nearly three weeks/months according to community reports. (Sentiment: negative)

### GitHub Updates

#### New Issues/PRs
- [Pull_request #6530: V2.0.0 release](https://github.com/elizaos/eliza/pull/6530) by odilitime - Status: open - Significance: Major modernization of repo automation covering TS, Python, and Rust interop.
- [Issue #6733: Merxex integration for agent-to-agent commerce](https://github.com/elizaos/eliza/pull/6733) by odilitime - Status: open - Significance: Enables new commercial capabilities for agents built on the platform.
- [Pull_request #6722: shared batch-queue drains and bounded knowledge embeddings](https://github.com/elizaos/eliza/pull/6722) by shawmakesmagic - Status: merged - Significance: Optimizes concurrency and task handling across the core framework.

#### Overall Focus
- Maintenance of the plugin ecosystem and stabilization of the NPM release workflow through serialized jobs to prevent race conditions.

### Discord Updates
- **#discussion:** High volume of scam reports involving phishing links and fake airdrops; technical focus shifted to private security vulnerability reporting by researcher kullai. (Key Participants: kullai, odilitime, stan0473, satsbased)
- **#coders:** Minimal technical activity; discussions primarily focused on identifying Discord mention notifications as scams. (Key Participants: stan0473, mssundine)

### User Feedback
- Community members expressed frustration over lack of transparency and roadmap updates despite market momentum. (Sentiment: negative)
- Concerns regarding token price performance vs. the team's prioritization of product quality. (Sentiment: neutral)

### Strategic Insights

#### Restructuring toward Decentralization
Dissolving Eliza Labs signals a major shift away from full-time paid development toward the original grassroots, open-source contribution model.

*Implications/Questions:*
  - Will the community be able to maintain the high development velocity previously provided by Labs?
  - How will the project ensure quality control under an open contribution model?

#### Security Maturity
The private reporting of vulnerabilities by ethical researchers highlights an urgent need for formal bug bounty programs or standardized security disclosure guidelines.

*Implications/Questions:*
  - Does the absence of a bounty program risk losing researcher attention to other projects?
  - How quickly can the core team pivot to address these disclosed issues?

### Market Analysis
- V3 Eliza is nearing completion with applications for both Milady and Eliza apps in active development. (Relevance: Key milestone for project adoption and potential market impact.)