Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

24Projects watched
17784Commits captured
17252AI analyses
98High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

17252 analyses
Highest risk·RSS
Informational 20 AI analysisMessage 83 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Add {Lower,Upper}Hex to ecdsa::Signature

This commit adds new ways to print ECDSA Bitcoin signatures as hexadecimal text (lowercase and uppercase), matching formatting already available for Taproot signatures. It also makes the existing Display implementation reuse the new LowerH…

69540f98by Mitchell Bagot+43−51 file
No security note in commit
Informational 15 AI analysisMessage 78 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Add From/TryFrom for Signature/SerializedSignature

This commit adds standard Rust conversion traits (From/TryFrom) between an ECDSA signature and its serialized byte form. It is a small API-consistency change that mirrors traits already present on the Taproot signature type. There is no in…

No security-relevant keywords in commit title or messageNo changes to cryptographic validation or parsing logicOnly adds convenience trait implementations delegating to existing methods
3cf8c405by Mitchell Bagot+21−01 file
No security note in commit
Low 26 AI analysisMessage 90 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Replace Signature Display with call to SerializedSignature

This commit fixes a formatting bug in how Bitcoin ECDSA signatures are printed as text. Previously, the signature was printed in two separate pieces (the DER-encoded signature and the sighash byte), which could mishandle formatting options…

Incorrect format-flag handling in Display implBehavioral inconsistency between Signature::fmt and SerializedSignature::fmtRegression test added for format-string parity
c8ee6361by Mitchell Bagot+18−21 file
No security note in commit
Informational 16 AI analysisMessage 73 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Add PartialOrd, Ord to ecdsa::Signature

This commit simply adds standard sorting traits (PartialOrd and Ord) to an ECDSA signature type and its associated sighash type, matching what already exists for similar types. There is no indication this fixes or introduces a security pro…

1e020732by Mitchell Bagot+2−22 files
No security note in commit
Informational 24 AI analysisMessage 76 · Adequate
EL ElectrumElectrum BitcoinSoftware wallets

qt: fix crash through stale pi resolve

This commit fixes a bug in Electrum's Qt send tab where the app could crash if a user edited the payment recipient field quickly while previous lookups were still finishing. The fix ignores results from outdated lookups instead of letting …

Fixes a race condition between asynchronous resolve callbacks and UI statePrevents exception/crash from stale callback accessing invalid stateIssue reference suggests reproducible crash via timing manipulation
299be410by f321x+4−01 file
No security note in commit
Informational 21 AI analysisMessage 100 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core): raise `wire.Error` from `EvoluIndexManagement` handler

This commit fixes how a Trezor hardware wallet reports a specific user error. Previously, when someone tried to set an already-set identity key rotation index, the device returned a generic 'FirmwareError'—the type normally reserved for un…

Error-type correction: internal/unexpected error category replaced with expected/process error categoryNo change to access control, authorization, cryptographic operations, or state-transition logicTest expectations updated to match new error type
01cbba57by Roman Zeyde+6−42 files
No security note in commit
Informational 18 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core): add chunkify support for Solana SignTx

This commit adds an optional user-interface feature for Solana transactions on Trezor hardware wallets. When enabled, long Solana addresses are shown on the device screen in smaller groups of characters (chunks of 4) instead of one long st…

No security-relevant code paths altered beyond display formattingNew optional protobuf field with safe default (False)Changelog describes the change as a feature/fix for address display, not a vulnerability
f52bea0aby obrusvit+369−25721 files
No security note in commit
Informational 19 AI analysisMessage 73 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Remove PrivateKeyExt and make PrivateKey::as_inner private

This commit is a routine API cleanup, not a security fix. It removes a helper trait called PrivateKeyExt and hides a low-level accessor method (as_inner) that exposes the underlying secret key object. The same signing behavior is preserved…

Reduction of public API surface for secret-key materialRemoval of extension trait that exposed raw ECDSA recoverable signingas_inner accessor narrowed from pub to pub(super)
e9ea66a1by Mitchell Bagot+14−344 files
No security note in commit
Informational 24 AI analysisMessage 77 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core): sign rotation index into Evolu sign registration

This commit updates the Trezor firmware's Evolu (delegated identity) registration signing feature so that the device now includes a 'rotation index' in the signed registration request. The rotation index tells the Quota Manager which versi…

Cryptographic signing protocol version bump (V1 -> V2)New required protobuf field in a security/identity messageDelegated identity key rotation logic touched
4db3a69dby Martin Pastyřík+106−288 files
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore: add Bitcoin Safe to `docs/misc/third-parties.md`

This commit simply adds one line to a documentation file listing a third-party project called Bitcoin Safe. It does not change any code, configuration, or security behavior of the Trezor firmware.

b10a27afby Roman Zeyde+1−01 file
No security note in commit
Informational 17 AI analysisMessage 72 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core/caesar): allocate test-related formats on-demand

This change moves some internal test-only Ethereum transaction display definitions from being permanently added to a global list to being generated on demand only when the device is running in debug/test mode. It is a memory-footprint and …

Test-only code is now gated behind a debug-mode generator, reducing production attack surfaceNo change to transaction parsing, signature verification, or display confirmation logicNo input validation changes observed
80bc85dfby Roman Zeyde+150−1402 files
No security note in commit
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this