We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit adds a new feature to the COLDCARD firmware that lets users organize their saved secure notes and passwords into groups, similar to folders. It is a user-experience improvement and does not fix or introduce any security vulnera…
edae8c1eby scgbckbone+345−183 filesThis commit only changes a CI script to pin a dependency version so older Rust toolchains can still build the project. It is a build-maintenance fix with no security relevance.
a8a4767fby Joost Jager+3−01 fileThis commit adjusts build settings to make compiled helper programs and build outputs smaller. It strips debug symbols, reduces optimization for size, and changes the debug-info flag for C code from detailed to basic. There is no indicatio…
02927b49by cepetr+20−33 filesThis commit only adds a new test case and a test wallet file to Electrum's test suite. It does not change any production code, so it cannot introduce a security vulnerability or fix one. The test wallet contains a publicly exposed seed phr…
4774f7adby ThomasV+147−02 filesThis commit fixes several bugs in how the COLDCARD Q1 hardware wallet talks to its built-in QR-code scanner. The changes make scanner startup more reliable, prevent stale 'go to sleep' commands from accidentally stopping a scan that just s…
ad2088d2by scgbckbone+163−693 filesThis tiny code change moves a 'needs reinit' flag from being shared across all QR scanner objects to being kept inside each individual scanner object. In the real device code the flag is removed from the base class; in the simulator it is …
55340577by scgbckbone+1−22 filesThis commit removes a small, custom one-byte buffering helper that was only needed to make older versions of a dependency (rust-bitcoin) happy. After the dependency changed its requirements, the wrapper became unnecessary. There is no secu…
b582ce15by Abeeujah+1−671 fileThis is a small cleanup change that removes an unnecessary BufReader wrapper when deserializing Bitcoin consensus objects. The underlying rust-bitcoin library now accepts a simpler 'Read' trait directly, so the code was updated to match. T…
deee085cby Abeeujah+1−21 fileThis commit fixes a bug in how the COLDCARD wallet creates encrypted backups when a temporary seed is being bypassed. Previously, if the main secret was stored as an extended private key ('xprv') rather than as BIP39 seed words, the backup…
67a5c6c2by scgbckbone+7−21 fileThis commit only updates two test files to fix failing tests. It changes test input data and adds an address-format parameter that a helper function now requires. There is no change to the actual COLDCARD firmware or wallet code that users…
eb112eb3by scgbckbone+9−22 filesThis is a one-word documentation fix in a Rust macro. The generated documentation for a cryptographic tag structure was accidentally referring to a non-existent variable name, so it displayed broken placeholder text like '[`$hash_name`]' i…
bb887edbby jrakibi+1−11 fileThis commit only adds new unit tests to verify that a previously changed function, Target::from_compact, returns zero when a Bitcoin 'compact' difficulty value overflows a 256-bit target. It does not change any production code. The tests c…
4ee43312by Mitchell Bagot+17−01 fileA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.