We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit is a routine code cleanup: it renames the `Error` type in the base58 module to the more descriptive `DecodeCheckError`, and adds a deprecated type alias so existing code using `base58::Error` continues to work. There is no chan…
b0eba4c0by Mitchell Bagot+45−395 filesThis commit moves input-validation and wallet-type checks for message decryption out of the user-interface and command-line layers and into the core wallet code. It also removes a faster, separate decryption path for imported wallets so al…
9a0cc0d6by SomberNight+25−173 filesThis commit is a simple code cleanup: it moves the message-encryption logic from two separate places (the command-line tool and the Qt graphical interface) into a single shared method on the wallet class. The actual encryption behavior is …
5e9c8df0by SomberNight+26−183 filesThis commit is a routine code cleanup: it moves message-signature verification out of three user-interface files into a single shared helper method in the wallet module. There is no security-relevant behavior change visible in the diff. Th…
ff5bbb04by SomberNight+26−304 filesThis commit only adds Python type hints and renames some function parameters for clarity in the Electrum desktop wallet's sign/verify and encrypt/decrypt message dialogs. It does not change what the code actually does, how it processes use…
0906fc20by SomberNight+45−181 fileThis is a small GitHub Actions workflow fix. It corrects how the exit code from a semver compatibility check script is captured and passed to later steps. There is no security issue here—just a CI plumbing bug being fixed.
b2e6894cby Nick Johnson+6−41 fileThis commit only restructures a single test file by wrapping each test case in its own code block (scope). It does not change any production code, network rules, or test behavior. There is no security impact.
756afe14by JP+124−1081 fileThis is a shell script maintenance fix for the project's continuous integration (CI) semver-checking script. It changes how a temporary directory cleanup command is captured so the cleanup actually runs correctly, and switches the trigger …
5c2c2f44by Nick Johnson+3−11 fileThis commit is a routine cleanup of GitHub automation. It merges two separate PR-labeling workflows into one, removing duplicated code. There is no change to the actual Bitcoin library code or to how user funds or data are handled.
61acda57by Nick Johnson+12−912 filesThis commit changes a GitHub Actions workflow so that an 'API break' label is added when a version-compatibility check fails and removed when it passes. Previously the label was only added and a comment was always posted. There is no secur…
8f093fc6by Nick Johnson+10−51 fileThis commit removes several calls that tried to wipe private-key material from memory. The developer says these wipes were 'ineffective' because the underlying ECKey object still held the secret bytes. The change is a cleanup, but it sligh…
1636c7e2by Craig Raw+2−1911 filesThis commit adds checks to make sure that when Sparrow Wallet asks an Electrum server for a specific Bitcoin transaction, the server actually returns the transaction that was requested. Before this change, a malicious or buggy server could…
3979694eby Craig Raw+100−163 filesA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.