We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit only adds a new integration test for an existing LND WalletKit RPC called SubmitPackage. It does not change production code, wallet logic, or network behavior. The test verifies that a zero-fee Bitcoin transaction can be accept…
47661ceaby Elle Mouton+226−03 filesThis commit only adds documentation to the release notes describing a new RPC command and lncli command that were already added in a previous pull request. It does not change any code, behavior, or security properties of the software.
68c47407by Elle Mouton+11−01 fileThis commit only edits the release changelog text. It reorders and rewords bugfix entries, adds one new NFC-related note, and removes some duplicate lines. No source code, firmware logic, or security behavior was changed.
2303b47cby Peter D. Gray+5−51 fileThis commit simply updates a stored Bitcoin blockchain height number from 932,301 to 956,098, along with its timestamp. There is no code logic change, no bug fix, and no security-related content.
5081f8ccby Peter D. Gray+2−21 fileThis commit is a cleanup of a previous change that added a cache for paid invoices. The developer admits the earlier code was sloppy ('arghhhhhh'). The patch removes redundant logic that tried to update the paid-invoice cache in multiple p…
63ee2f3aby SomberNight+6−212 filesThis commit appears to be a one-line version correction in a submodule reference (external/ckcc-protocol). No code changes are visible, and no security relevance is stated or inferable from the available information.
ec4c4853by Peter D. Gray+1−11 fileThis commit simplifies a build-time check that verifies the correct versions of submodules are being used. It does not change what is being checked, only how the result is reported. There is no indication this is a security fix.
a4ae6c88by Peter D. Gray+4−61 fileThis commit changes only a test helper file (tests/translations.py) so that the test suite's translation lookup behaves the same way the actual device firmware does: missing or empty translated strings fall back to English. It is a test-co…
55fb315aby Roman Zeyde+2−11 fileThis commit only updates two automatically-generated timestamp files used to set dates on files created by the COLDCARD hardware wallet. It changes the recorded build date from March 5, 2026 to June 30, 2026, and bumps the firmware version…
81cbc472by Peter D. Gray+6−62 filesThis is a tiny build-script change for the COLDCARD hardware wallet firmware. It makes two Makefile adjustments: the release-candidate build target now depends on a submodule-check step, and a cleanup command is silenced so it doesn't prin…
e9552c5fby Peter D. Gray+2−21 fileThis commit only edits the release notes document. It adds a description of a previously merged BOLT 12 invoice request codec feature and mentions a minor RPC behavior change where a nil reply path stays nil instead of appearing as an empt…
e9a2cb43by bitromortac+7−01 fileThis commit adds validation checks for BOLT 12 invoice requests in the LND Lightning node. It ensures that invoice requests follow protocol rules when being created (written) and received (read), rejecting malformed or non-compliant reques…
8b4587b0by bitromortac+1703−53 filesA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.