We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit simply updates the version of mypy, a Python type-checking tool used in the project's continuous integration (CI) linting pipeline, from 1.19.1 to 2.3.0. There is no indication of a security fix or vulnerability in the code its…
14f4ddcbby fanquake+1−11 fileThis commit removes support for a new Ethereum transaction type (EIP-7702) from Trezor hardware wallets. It is described by the developers as a temporary revert of a feature that will be re-added later. There is no indication this is a sec…
347c3c4dby PrisionMike+4−2086 filesThis commit changes a single CI (continuous integration) configuration file for an OpenBSD cross-compilation test job. It disables building the Qt GUI library in that specific test job because the build tool llvm-ranlib does not support th…
b0e09511by fanquake+1−11 fileThis is a small build-tooling change in Trezor's firmware build system. It changes how embedded binary files are compressed before being baked into the firmware image: instead of producing standard zlib-wrapped deflate streams, it now prod…
427d85cbby cepetr+7−11 fileThis commit is a routine update of third-party Rust libraries used by Core Lightning's REST and WebSocket proxy plugins. The author says no code changes were needed. It is not a security patch itself, but keeping dependencies current can p…
678ff47dby daywalker90+273−2903 filesThis commit changes the factory-reset/wipe routine in a Keystone hardware wallet's startup self-check. It replaces one wipe step with a call to wipe the secure element (SE_WipeAll) and moves the 'ErasePublicInfo' step to occur after accoun…
a366addeby aaron+4−21 fileThis commit is a routine user-interface cleanup. It replaces many copies of hand-written breadcrumb navigation HTML across the application with a single shared 'Breadcrumb' view component. There is no security-relevant change here—only the…
eac04593by Nicolas Dorier+229−48547 filesThis commit fixes a page-number overlap in the secure-element storage layout and updates a user-facing help string. Previously, the RSA hash page was defined as page 36, which was also used for account status. The change gives the RSA hash…
11ed27b3by aaron+15−93 filesThis commit is a routine feature patch for the Keystone 3 hardware wallet. It resumes adding the device's firmware version into Zcash wallet connection data, and it fixes two simulator-only bugs: a keyboard crash when a text box is destroy…
4518972cby soralit+123−75 filesThis commit only rewrites a code comment in the Zcash PCZT validation logic. It clarifies why the code checks that certain cryptographic keys are not reused across Orchard and Ironwood 'pools.' The actual validation behavior does not chang…
e4ab2e4dby Adam Tucker+3−31 fileThis commit is a small code cleanup in the Zcash part of the Keystone hardware wallet firmware. It changes how the code checks for duplicate 'rk' values across Orchard and Ironwood shielded transaction actions. The old code used chained it…
15709554by Adam Tucker+11−121 fileThis commit simply changes a Rust helper trait from public to private visibility (pub(crate)). It is a routine API-cleanup change with no security relevance. The trait converts integer sizes to u64 and is no longer needed in any public int…
56b2eff9by Mitchell Bagot+1−11 fileA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.