We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit simply removes an unused on-screen message function called show_wait_text() from the Trezor firmware. There is no security fix or behavior change; it is a routine code cleanup.
46761b96by Roman Zeyde+0−6612 filesThis commit is purely a code-style cleanup. It adds a space between the macro name LIMITED_WHILE and its opening parenthesis across many fuzz test files, plus a few tiny formatting fixes like removing a redundant semicolon and fixing inden…
fab8eeedby MarcoFalke+91−14265 filesThis commit only changes a code-formatting configuration file. It tells the project's automatic formatting tool (clang-format) to treat the custom LIMITED_WHILE macro the same way it treats a normal 'while' loop when laying out code. There…
fa0d777cby MarcoFalke+1−01 fileThis commit removes a temporary safety check in a fuzz test (automated randomized testing code) for Bitcoin Core's inter-process communication. The check avoided sending empty byte arrays because an external library had a bug that triggere…
fa1a9bdeby MarcoFalke+0−21 fileThis commit is a minor style cleanup inside a fuzz test (a test that feeds random data to software to find bugs). It replaces a loop that reads a number from fuzz input with a standard helper that reads a single true/false byte each iterat…
fa55385aby MarcoFalke+1−31 fileThis commit is a minor internal test-framework cleanup. It moves a single check for whether the device under test has an Optiga security chip from one place to another, computing it once per test session instead of repeatedly. There is no …
e72f9596by Roman Zeyde+8−32 filesThis is a test-only change to the Python Trezor client library. It fixes a potential deadlock in test synchronization code by waiting for a response to a Cancel message before sending a Ping message. There is no change to device firmware o…
a6bffbcaby Roman Zeyde+15−121 fileThis commit fixes a resource leak in Electrum's submarine-swap feature. When a connection to a swap server failed to start, the program was not properly cleaning up the connection object, so each failed attempt could leave behind leftover …
c5a38e5aby f321x+4−22 filesThis commit fixes a bug in the Trezor hardware wallet's user-interface code. Previously, certain simple on-screen messages were wrapped in a Python `with` block, which caused the underlying layout object to be cleaned up (dropped) as soon …
155fa8d2by Roman Zeyde+15−287 filesThis commit updates a helper library (libmultiprocess) used by Bitcoin Core. The only code change replaces a raw memory copy with a safer standard-library copy in a routine that converts byte arrays for inter-process communication. The res…
6d5f7539by MarcoFalke+55−306 filesThis commit updates the version of a Python packaging tool called 'uv' used inside Bitcoin Core's automated code-checking container image, from version 0.10 to version 0.11. It is a routine dependency bump in the continuous-integration (CI…
058a73a0by fanquake+1−11 fileThis commit simply updates the version of Ubuntu used by Bitcoin Core's automated linting (code style checking) container from 24.04 to 26.04. It is a routine CI/infrastructure maintenance change with no security relevance visible in the c…
900a7785by fanquake+1−11 fileA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.