We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit adjusts build settings to make compiled helper programs and build outputs smaller. It strips debug symbols, reduces optimization for size, and changes the debug-info flag for C code from detailed to basic. There is no indicatio…
02927b49by cepetr+20−33 filesThis commit only adds a new test case and a test wallet file to Electrum's test suite. It does not change any production code, so it cannot introduce a security vulnerability or fix one. The test wallet contains a publicly exposed seed phr…
4774f7adby ThomasV+147−02 filesThis commit fixes several bugs in how the COLDCARD Q1 hardware wallet talks to its built-in QR-code scanner. The changes make scanner startup more reliable, prevent stale 'go to sleep' commands from accidentally stopping a scan that just s…
ad2088d2by scgbckbone+163−693 filesThis tiny code change moves a 'needs reinit' flag from being shared across all QR scanner objects to being kept inside each individual scanner object. In the real device code the flag is removed from the base class; in the simulator it is …
55340577by scgbckbone+1−22 filesThis commit removes a small, custom one-byte buffering helper that was only needed to make older versions of a dependency (rust-bitcoin) happy. After the dependency changed its requirements, the wrapper became unnecessary. There is no secu…
b582ce15by Abeeujah+1−671 fileThis is a small cleanup change that removes an unnecessary BufReader wrapper when deserializing Bitcoin consensus objects. The underlying rust-bitcoin library now accepts a simpler 'Read' trait directly, so the code was updated to match. T…
deee085cby Abeeujah+1−21 fileThis commit fixes a bug in how the COLDCARD wallet creates encrypted backups when a temporary seed is being bypassed. Previously, if the main secret was stored as an extended private key ('xprv') rather than as BIP39 seed words, the backup…
67a5c6c2by scgbckbone+7−21 fileThis commit only updates two test files to fix failing tests. It changes test input data and adds an address-format parameter that a helper function now requires. There is no change to the actual COLDCARD firmware or wallet code that users…
eb112eb3by scgbckbone+9−22 filesThis is a one-word documentation fix in a Rust macro. The generated documentation for a cryptographic tag structure was accidentally referring to a non-existent variable name, so it displayed broken placeholder text like '[`$hash_name`]' i…
bb887edbby jrakibi+1−11 fileThis commit only adds new unit tests to verify that a previously changed function, Target::from_compact, returns zero when a Bitcoin 'compact' difficulty value overflows a 256-bit target. It does not change any production code. The tests c…
4ee43312by Mitchell Bagot+17−01 fileThis commit is a routine update to the English user-interface text strings in the Trezor firmware. It changes wording such as 'Continue with the next share' to 'Enter next share' and adjusts the line breaks in a few messages. There is no c…
aceafef6by Michal Kazda+7934−79343 filesThis commit only updates expected test-result fingerprints (hashes) in a JSON file used by the project's automated user-interface tests. No actual product code, firmware logic, or user-facing behavior was changed. It is a routine test-main…
c833b836by Michal Kazda+36−361 fileA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.