We build on Nervos CKB: Cellula (cellula.id), a wallet with .cell names
and Fiber payments, and the hosted Fiber LSP behind it. What we find while running them goes back
to the projects we build on.
The list below updates itself each day from GitHub's public data.
So far: 11 pull requests merged in 5 repositories, 2 open, and 17 reports.
Fiber (nervosnetwork/fiber)
Merged:
- #1707 fix: hold cells across funding and the watchtower (merged 2026-11-05)
- #1718 fix: keep store change subscribers through a burst (merged 2026-11-03), from our report #1717
- #1719 fix: build one CKB client for the watchtower round (merged 2026-11-03)
- chenyukang/fiber#9 fix(lsp): look tenants up by key without reading them all (merged 2026-11-01)
- #1715 fix: replace secp placeholders when merging funding witnesses (merged 2026-10-29)
2 more merged
5 reports (3 open)
- #1724 Trampoline holds a second payment of a paid invoice until expiry (open)
- #1722 Payer TLC timeout is replayed at every CheckChannels and fails a reused attempt (open)
- #1720 has_pending_tlc_for_payment_hash reads every channel state when the hash is not in the current channel (open)
- #1717 Store change subscribers stop for good after a burst of 17 changes (closed)
- #1679 Hosted LSP (#1623): three findings from a testnet run (closed)
- Findings on the LSP support pull request, #1623
CCC (ckb-devrel/ccc)
Merged:
- #575 feat(core): add addressResolver to ClientConfig (merged 2026-09-26), from #548
- #540 docs(core): say that a dep with a type id ignores its configured outpoint (merged 2026-09-18)
Open:
- #596 fix(core): verify JoyID signatures against the given key and message (open)
3 reports (1 open)
Merged:
- ckbdapps#7 content: Cellula.id links, contracts and Dev Tools (merged 2026-10-29)
- CrowdCell#10 feat: show .cell names for creators and backers (merged 2026-10-13)
Open:
- docs.nervos.org#966 docs: add known pitfalls to the script testing guide (open)
9 reports (5 open)
- spore-contract#77 Testnet Spore and Cluster code cells are under the dev chain's published key (open)
- ckb-light-client#303 Publish a release with the June and August fixes (open)
- fluxo#10 CI: npm audit fails on zod 4.6.5 (open)
- fluxo#9 Deleting one bank's data resets recurring items of every bank (open)
- fluxo#8 Paid back accepts payments larger than the expense (open)
- CrowdCell#9 Show
.cellnames for campaign creators and backers (closed) - html-jukebox#1 PROTOCOL_REPAIR: step 14 accepts a spliced append history (each backlink declares a prefix checksum) (closed)
- ckbfs#3 Measured v3 publish limits, prefix-checksum verification, and whether ckbfs:// is normative (closed)
- Spool-Queue#1 Optional JSON file persistence via File System Access API (closed)
All of it, as GitHub lists it: pull requests and issues by LusoCryptoLabs.