We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit simply changes a version number string from 4.7.2 to 4.8.0 in a single file. It does not modify any security-related code, fix any bug, or change any behavior of the Electrum wallet software. There is no security issue here.
fb9f6c87by f321x+1−11 fileThis commit only adds the written release notes for Electrum version 4.8.0. It is documentation: it lists what changed in the new version, including one security fix, but it does not change any program code. By itself, this commit does not…
78e2fcc7by f321x+76−01 fileThis commit only updates two generated API listing files (text snapshots of public functions and types). It records that several new script helper methods, such as checking whether a script is a pay-to-public-key-hash or pay-to-witness-pub…
1976a374by Mitchell Bagot+28−02 filesThis commit only moves existing tests from one crate to another and adds new unit tests for script helper functions. It does not change any production code behavior, so it has no security impact on its own.
1b12eac0by Mitchell Bagot+195−693 filesThis commit is a simple code reorganization: two helper functions for working with OP_RETURN outputs are moved from one internal module to another. The actual behavior of the functions is unchanged, and there is no security fix or vulnerab…
e448528eby Mitchell Bagot+17−175 filesThis commit is a routine internal code reorganization. It copies a small helper function that builds SegWit scriptPubkeys into a lower-level crate so both crates can use it. The function remains private to the library, performs no user-fac…
af835f0cby Mitchell Bagot+17−01 fileThis commit is a straightforward internal code reorganization. It moves a helper function called witness_version from one Rust module to another within the same project, without changing what the function does or how it behaves. There is n…
41c0cf01by Mitchell Bagot+38−332 filesThis commit simply copies a few internal Bitcoin script constants (specific byte values used in transaction scripts) into a lower-level crate module. It does not change any public behavior, fix a bug, or alter how data is validated. There …
459b2751by Mitchell Bagot+15−02 filesThis commit is a routine internal code reorganization. It moves helper functions that identify and create common Bitcoin script types (like P2SH, P2WSH, P2WPKH, P2A) from the main `bitcoin` crate into the lower-level `primitives` crate. Th…
40f5cbb5by Mitchell Bagot+93−867 filesThis change only fixes a flaky test. It does not change any production code, so it has no security impact on real users or the network.
0860e42dby Boris Nagaev+5−41 fileThis commit fixes a memory-usage issue, not a security vulnerability. When reading PSBT data, the code was keeping a pointer to a large 4 MiB internal memory block even for tiny scripts. The patch copies the small script into its own compa…
b0ab66feby Boris Nagaev+10−12 filesThis commit fixes how Sparrow Wallet exports coin labels in the BIP-329 format. Previously, the export incorrectly marked every unspent coin as 'spendable=true' in the exported file, even though the BIP-329 specification says the 'spendabl…
37bab9f3by Craig Raw+1−11 fileA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.