We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit only adds new test cases for BIP-87 extended public key derivation. It does not change any application code, cryptographic logic, or security behavior. There is no indication of a security fix or vulnerability.
518fc20dby Salvatore Ingala+7−12 filesThis commit only updates documentation and a changelog. It adds BIP-87 to the list of standard Bitcoin derivation paths whose extended public keys (xpubs) can be exported without requiring the user to confirm on the device screen. There is…
f7920f56by Salvatore Ingala+6−23 filesThis is a large UI refactoring commit that improves date range filtering, search components, and label selectors across BTCPay Server's admin pages. It replaces timezone-offset handling with named timezone handling, restructures how search…
3ec6a984by Nicolas Dorier+1593−159162 filesThis commit only removes five documentation comments from the implementation of a Rust trait. The actual code behavior does not change; only the source-code comments are deleted because the documentation is already rendered from the trait …
1b5efc4dby Mitchell Bagot+0−51 fileThis commit only adds plain-text comments to three copies of the same internal helper function, reminding future developers that the copies should be kept in sync. No code behavior was changed, so it has no security effect on its own.
fd8b0879by Mitchell Bagot+3−03 filesThis commit fixes a localization bug in BTCPay Server's Blazor user interface components. Some text strings were not being translated into the user's chosen language because they relied on a translation mechanism that only works in older R…
364e6be9by Wiredancer+14−74 filesThis commit is a test-only change. It updates the automated UI testing helper so that, when a menu is detected on the newer 'Caesar' device layout, the test sends a right-button press or a screen click instead of using an older debug comma…
581f979aby Roman Zeyde+9849−98452 filesThis commit only updates two public API listing files (text snapshots of the crate's public interface). It widens which script types can call a helper that builds a Pay-to-Witness-Script-Hash output. There is no code change, no bug fix, an…
57e55036by weifanglab+4−22 filesThis is a one-line build-system fix in the Makefile. It adds generated Python gRPC files to a list used for dependency tracking during build checks. There is no indication of any security issue, vulnerability, or runtime behavior change. I…
2e6ae4cdby Lagrang3+1−01 fileThis is a build-system fix for a flaky CI test. It narrows two 'git diff' checks so they only look at the specific directories they are meant to validate, instead of scanning the entire repository. There is no security issue here.
45b04dc0by Lagrang3+2−21 fileThis change fixes how the Lightning Network Daemon (LND) decides which pending payments (HTLCs) are considered 'active' in a payment channel. Previously, it matched HTLCs between the two sides of a channel by hashing the onion routing blob…
489a6dabby ziggie+83−72 filesThis commit fixes a bug in LND's code that creates a copy of an open Lightning payment channel. The copy function was accidentally leaving out two pieces of channel data: the height at which the channel was confirmed as closed, and a datab…
04b7486fby ziggie+2−01 fileA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.