CommitWatch RSS
Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

Explore the watch feed ↓See how scoring works →
24Projects watched
17784Commits captured
17252AI analyses
98High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

17252 analyses
Highest risk·RSS
Low 37 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

bolt12: add ErrNilPublicKey and type the offer_issuer_id guard

This commit hardens LND's BOLT 12 offer handling by replacing a one-off panic-prevention check with a reusable, typed error. A malformed offer where a public-key field is technically 'present' but actually contains a nil pointer would prev…

panic-prevention for nil public-key TLV encodingtyped sentinel error improves caller recoverabilityreader-side guard added where only writer-side guard existed before
338e4bdaby bitromortac+56−152 files
No security note in commit
Open full analysis →Source commit ↗
Low 26 AI analysisMessage 50 · Thin
LL Lightning LabsLND BitcoinLightning Network

bolt12: add NewInvoiceRequestFromOffer

This commit adds a new helper function in LND's BOLT 12 implementation to build invoice requests from offers. It ensures all fields from an offer—including unknown future fields—are copied into the invoice request. The change is primarily …

New helper ensures BOLT 12 spec compliance: 'MUST copy all fields from the offer (including unknown fields)'Unknown odd TLVs are carried forward via decodedTLVs sidecar, preventing silent omission of future offer fieldsValidation added for required payer ID and metadata fields
c419ba56by bitromortac+189−02 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 28 · Opaque
CK CoinkiteCOLDCARD firmware BitcoinHardware wallets

symlinks, just in case

This commit only adds two symbolic links (shortcuts) in the release-notes folder, pointing two old file names to a shared history file. It does not change any firmware code, wallet logic, or security behavior. There is no security relevanc…

c4977564by Peter D. Gray+2−02 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 28 · Opaque
CK CoinkiteCOLDCARD firmware BitcoinHardware wallets

update release notes

This commit is a documentation-only update to Coldcard firmware release notes. It moves many bug-fix and feature descriptions from an unpublished 'Next-ChangeLog.md' into the published 'ChangeLog.md' and renames/reorganizes history files. …

Changelog claims fix for legacy input amount spoofing via PSBT witness-utxo handlingChangelog claims disabling Virtual Disk and NFC before HSM activationChangelog claims stricter address ownership validation
fe3b6b27by Peter D. Gray+702−6725 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 0 · Opaque
CK CoinkiteCOLDCARD firmware BitcoinHardware wallets

cleanups

This commit only edits the release notes file (Next-ChangeLog.md). It rewords existing changelog entries, adds punctuation, fixes formatting, and updates planned release dates. No source code, build scripts, firmware binaries, or documenta…

defeda26by Peter D. Gray+74−571 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
CK CoinkiteCOLDCARD firmware BitcoinHardware wallets

bump version to 5.5.1 & 1.4.1Q

This commit only changes version numbers in two build files and a changelog heading. There is no code change, no bug fix, and no security-related content.

0b21d07cby scgbckbone+4−43 files
No security note in commit
Open full analysis →Source commit ↗
Low 38 AI analysisMessage 45 · Thin
CK CoinkiteCOLDCARD firmware BitcoinHardware wallets

limit BIP-322 msg length to 330 chars

This commit adds a 330-character limit to BIP-322 proof-of-reserve messages on the COLDCARD hardware wallet. Without the limit, an attacker could craft a very long message that might be used to mislead the user, overflow display buffers, o…

Input length bound added to user-facing signed messageAssertion failure prevents processing of oversized messagesEmpty message already rejected; documentation now also requires non-empty message
b29d2347by scgbckbone+41−13 files
No security note in commit
Open full analysis →Source commit ↗
Low 29 AI analysisMessage 50 · Thin
CK CoinkiteCOLDCARD firmware BitcoinHardware wallets

standalone encrypted backups for Secure Notes & Passwords

This commit adds a new feature to the COLDCARD firmware: encrypted backups for Secure Notes & Passwords. Previously, exporting notes and passwords to a microSD card produced an unencrypted JSON file. Now the device can encrypt that export …

New encryption feature for previously cleartext notes/password exportsRefactoring of backup password and 7z encryption code into reusable helpersAddition of inner_ext parameter to backup decryption to support .json payloads
d58fdfd5by scgbckbone+467−1246 files
No security note in commit
Open full analysis →Source commit ↗
Low 33 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core/caesar): fix `confirm_properties()` handling of `PageMsg::Info`

This commit fixes a small Rust UI bug in Trezor's 'Caesar' firmware layout. When a user viewed an 'info' page during a confirmation prompt, the device previously failed to return the expected 'INFO' response and instead threw a type error.…

Missing match arm in message translation layer could cause unexpected runtime errorFixes UI flow behavior in confirmation promptsNo explicit security claim in commit message or diff
04621573by Roman Zeyde+1−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 87 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

test(core/caesar): visit menu only on last `ButtonPage`

This is a minor test-only adjustment for the Caesar user interface layout. It changes a test helper so that it only tries to open the menu on the last page of a multi-page screen, because earlier pages do not have a menu/info button. There…

a0fe1eccby Roman Zeyde+7−72 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core): return to autolock menu after setting a new value

This commit is a minor user-interface polish change. After a user changes the auto-lock timeout setting on a Trezor device, the device now returns to the dedicated Auto-Lock menu instead of the broader Security menu. It does not change any…

62382b34by Roman Zeyde+30−303 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 90 · Strong
EL ElectrumElectrum BitcoinSoftware wallets

regtest: make extract_preimage less flaky

This commit fixes a flaky automated test, not a security bug in the Electrum wallet. It adds a wait step so the test script doesn't check log files before background payment commands have finished writing to them. There is no change to pro…

2a321f08by f321x+1−01 file
No security note in commit
Open full analysis →Source commit ↗
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this →