Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

24Projects watched
17558Commits captured
17148AI analyses
88High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

17148 analyses
Highest risk·RSS
Informational 15 AI analysisMessage 76 · Adequate
BT BTCPay ServerBTCPay Server BitcoinLightning NetworkPayment infrastructure

Unify reports page time range selection (#7438)

This commit is a routine UI/UX refactor of the BTCPay Server reports page. It replaces a custom date-picker and JavaScript-driven report fetching with a shared date-range selector component and standard GET form submission. There is no ind…

64fbba6fby Nicolas Dorier+212−28916 files
No security note in commit
Informational 19 AI analysisMessage 62 · Adequate
KS KeystoneKeystone 3 firmware BitcoinHardware wallets

perf(zcash): speed up batch processing and show a loading hint

This commit is a performance and user-experience improvement for Zcash batch transactions on the Keystone 3 hardware wallet. It speeds up processing of multiple Zcash PCZTs by caching decoded viewing keys and spend-authorization keys acros…

Refactors key derivation caching for Zcash batch signing (SpendAuthCache)Adds BatchCheckContext to cache decoded UFVK and WalletKeys across batch itemsFuses check and parse passes to reduce bundle walks and output trial-decryption
be657651by Adam Tucker+910−25212 files
No security note in commit
Moderate 61 AI analysisMessage 57 · Thin
KS KeystoneKeystone 3 firmware BitcoinHardware wallets

fix(zcash): bound batch count before parsing

This commit adds a safety check for Zcash batch transactions on Keystone hardware wallets. Before fully parsing a batch of PCZT (Zcash transaction) data, the firmware now reads the declared number of items and rejects it if it exceeds 50. …

Pre-allocation input validation: bounds a length field before parser allocationPotential denial-of-service vector mitigated: oversized count could exhaust device memoryNew dependency `postcard` introduced for controlled length decoding
c3c717c9by Adam Tucker+60−13 files
No security note in commit
Low 37 AI analysisMessage 62 · Adequate
KS KeystoneKeystone 3 firmware BitcoinHardware wallets

feat(zcash): use bounded PCZT batches and compact responses

This commit refactors how Keystone's Zcash batch signing feature handles large batches. It replaces an older message envelope with a new format that uses the upstream Zcash PCZT batch signer, adds a 512 KiB total size cap, raises the maxim…

Adds explicit 512 KiB byte bound on batch request/response data in addition to a count boundSwitches batch response from full signed PCZT bytes to compact spend-authorization signatures, reducing data exposureRejects duplicate canonical PCZT payloads in a batch
2a86bb62by Adam Tucker+534−41713 files
No security note in commit
Informational 15 AI analysisMessage 45 · Thin
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

2026-07-12 automated rustfmt nightly

This is a routine automated code-formatting commit. It only reorders imports, removes blank lines, and collapses multi-line formatting to single-line formatting as directed by the rustfmt tool. There are no functional code changes, no bug …

20300fc7by Fmt Bot+8−175 files
No security note in commit
Low 32 AI analysisMessage 58 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

net_processing: Replace CompareInvMempoolOrder

This Bitcoin Core commit refactors how transactions are selected and sorted before being announced to network peers. It replaces an older in-place heap sort with a new mempool function that picks the best transactions by mining fee score w…

Refactor of P2P transaction inventory relay ordering logicChange of container type from std::set to std::vector for pending inventoryIntroduction of new mempool dependency-aware selection API
e1b7490fby Anthony Towns+37−551 file
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

txmempool: Drop CompareMiningScoreWithTopology

This commit removes an unused helper function called CompareMiningScoreWithTopology from Bitcoin Core's transaction memory pool code. It also updates an internal consistency check to use a different, already-existing comparison method. The…

749bb447by Anthony Towns+4−222 files
No security note in commit
Informational 15 AI analysisMessage 65 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

util/tokenbucket.h: Provide a generic TokenBucket class

This commit introduces a brand-new, generic token-bucket utility class and a full set of unit tests for it. A token bucket is a common algorithm for rate limiting (controlling how often an action can happen). There is no change to existing…

7927650eby Anthony Towns+201−02 files
No security note in commit
Moderate 63 AI analysisMessage 90 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

net_processing: add a global delay queue for sending txs

This commit adds a global rate limiter to how many transaction announcements (INV messages) a Bitcoin node sends out. Before, each peer had its own queue, so a node could receive one transaction and announce it to over 100 peers, acting li…

Global rate limiting replaces per-peer queues to prevent transaction-announcement amplificationDual token buckets bound both INV count and relay bandwidthCommit message explicitly describes the change as limiting transaction-spam amplification and excessive memory/CPU usage
df31ee57by Anthony Towns+176−252 files
Vendor flagged security relevance
Informational 15 AI analysisMessage 50 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

net_processing: Provide a 30bpm heartbeat log while inv backlog is in use

This commit adds a periodic debug log message that prints statistics about Bitcoin's inventory backlog. It is purely an observability/monitoring change and does not alter network behavior, consensus rules, or security boundaries.

6307bd03by Anthony Towns+26−01 file
No security note in commit
Informational 19 AI analysisMessage 78 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

init: add -txsendrate configuration parameter

This commit adds a new debug-only command-line option called -txsendrate that lets node operators change how many transaction announcements per second Bitcoin Core sends to inbound peers. The default behavior stays the same (14 transaction…

Adds a new DEBUG_ONLY configuration knob for transaction inventory broadcast rateClamps user-supplied value to 1-1000 tx/s to prevent extreme misconfigurationReplaces hardcoded constant with runtime option; default behavior unchanged
74a47a52by Anthony Towns+16−95 files
No security note in commit
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this