CommitWatch RSS
Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

Explore the watch feed ↓See how scoring works →
24Projects watched
17776Commits captured
17247AI analyses
98High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

17247 analyses
Highest risk·RSS
Low 39 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core): add Rust-based THP implementation

This commit adds a new Rust implementation of the Trezor Host Protocol (THP), which is the secure communication layer between a Trezor hardware wallet and a host computer/phone. It introduces encryption, channel management, pairing, and cr…

New cryptographic transport protocol implementation (THP) addedGlobal mutable state protected by spin::Mutex in single-threaded environmentCredential verification callback invoked from Rust into MicroPython
acb6c376by Martin Milata+2571−319 files
No security note in commit
Open full analysis →Source commit ↗
Low 35 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(core/rust): trezor-crypto backend glue for noise-protocol

This commit refactors the cryptographic glue code that connects Trezor's embedded firmware to a Rust-based Noise protocol implementation used for secure device communication. The most notable security-relevant change is the addition of a c…

Added constant-time tag comparison for AES-GCM to mitigate timing side-channelsSplit combined AES-GCM encrypt/decrypt type into separate types to enforce correct state machine usageAdded zeroizing wrappers for sensitive key material used by Noise protocol backend
bc97a6b2by Martin Milata+553−1089 files
No security note in commit
Open full analysis →Source commit ↗
Low 36 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core): switch from Python THP implementation to Rust-based one

This commit replaces the Python implementation of Trezor's THP (Trezor Host Protocol) with a Rust-based one. It is a large refactoring that moves channel state management, encryption, packet handling, and handshake logic from Python into a…

Large rewrite of a security-critical transport/encryption protocol (THP)Removal of Python-side buffer-allocation failure paths (now raises `FirmwareError`)Credential length and field truncation now enforced in Python before Rust processing
00ec9a7fby Martin Milata+957−251843 files
No security note in commit
Open full analysis →Source commit ↗
Low 45 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core): unallocated THP session lookup

This commit fixes a bug in how the Trezor hardware wallet looks up unused secure sessions. Previously, the code checked whether a session slot was 'empty' by comparing the whole slot object to a placeholder. After a code change, that compa…

Incorrect identity comparison used for 'unallocated' slot detectionSession cache slot reuse/collision risk if empty slots are misidentifiedFix touches THP (Trezor Host Protocol) session management, which protects seed-derived secrets
bed87470by Martin Milata+34−282 files
No security note in commit
Open full analysis →Source commit ↗
Informational 18 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(core/rust): add TryFrom<Option<T>> for Obj

This is a small internal code cleanup in the Trezor firmware's Rust code. It replaces a custom helper function with a standard Rust conversion trait so that optional values can be converted to MicroPython objects in a more idiomatic way. T…

Refactoring of object conversion traits in Rust/MicroPython bridgePropagation of conversion errors via TryFrom instead of infallible FromRemoval of custom helper `Obj::from_option`
6301a688by Martin Milata+15−224 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(rust/trezor-thp): use trezor-noise-protocol from crates.io instead of git

This is a routine dependency housekeeping change. The project switched from loading a small cryptography helper library directly from a Git repository to using the published version on crates.io, and bumped the version from 0.2.0 to 0.2.1.…

f2efc7ffby Martin Milata+1−51 file
No security note in commit
Open full analysis →Source commit ↗
Informational 13 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core): cargo-vet audits for trezor-thp dependencies

This commit only updates supply-chain audit records for two Rust dependencies used by Trezor hardware wallets. It adds signed-off statements that the code is safe to deploy, but does not change any actual firmware, cryptographic, or applic…

993cf8dbby Martin Milata+18−02 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 47 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core): update fixtures

This commit only adds new expected test result hashes (called 'fixtures') for on-screen UI tests. It does not change any firmware code, wallet logic, or security behavior. There is no indication of a security fix or vulnerability.

c9bce09dby Martin Milata+12−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 12 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(core): avoid debug build warnings without `--dbg-console`

This commit is a build-system cleanup. It makes sure that debug-only logging code is compiled only when both the 'debug' feature and the 'dbg_console' feature are enabled. Previously, enabling a debug build without the debug console produc…

d0dbc0acby Roman Zeyde+25−385 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 77 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core): decouple logging functionality from PYOPT=0

This is a small internal build-system cleanup. It moves the optional debug logging module so it can be compiled into optimized (non-debug) firmware builds when the debug console feature is enabled. There is no user-facing behavior change, …

853fa7a8by Roman Zeyde+7−75 files
No security note in commit
Open full analysis →Source commit ↗
Informational 16 AI analysisMessage 68 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

net: optimize compact block extra tx iteration

This is a small performance cleanup in Bitcoin Core's network code. A temporary cache used when reconstructing compact blocks used to be fully sized up front, meaning the code would repeatedly scan empty placeholder slots. The change inste…

Performance optimization in compact block reconstruction pathAvoids scanning default/empty entries in vExtraTxnForCompactNo bounds-check, memory-safety, or validation logic changed
1a3cbf1bby Lőrinc+7−51 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 58 · Thin
LL Lightning LabsLND BitcoinLightning Network

chanstate: remove store generics

This commit is a routine internal code cleanup in the LND Lightning node software. It removes temporary generic type parameters from channel-state database interfaces and replaces them with direct references to the concrete OpenChannel typ…

68ad283dby ziggie+88−8915 files
No security note in commit
Open full analysis →Source commit ↗
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this →