CommitWatch RSS
Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

Explore the watch feed ↓See how scoring works →
24Projects watched
18178Commits captured
17450AI analyses
103High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

17450 analyses
Highest risk·RSS
Low 49 AI analysisMessage 72 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core): fix eth signing `data_length` check

This commit replaces internal programming assertions (which crash the device if they fail) with proper error handling for Ethereum transaction signing when a payment request is involved. It ensures that if someone supplies a payment reques…

assert replaced with explicit exceptioninput validation added for payment request pathEthereum transaction signing hardening
a4e3fcc1by M1nd3r+9−31 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 57 AI analysisMessage 77 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core): fix device locking if only SD card protection is enabled

This update fixes a bug in Trezor hardware wallets where the device would not properly lock itself when only SD card protection was enabled and no PIN was set. In that configuration, an attacker with brief physical access could potentially…

Bypass of device locking/autolock when only SD-card protection is enabledInconsistent authorization checks across lock_device, bootscreen, and homescreenNew regression test `test_sd_protect_lock` covers both session lock and auto-lock with PIN removed
e686ecd6by Roman Zeyde+155−197 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Moderate 51 AI analysisMessage 90 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core): adjust thp credential validation

This commit fixes a timing weakness in how a Trezor hardware wallet checks the authenticity of a 'credential' used in its Trezor Host Protocol (THP). Previously, the device compared two secret codes with a standard equality check, which ca…

Replacement of standard equality comparison with constant-time comparison (consteq)Addition of explicit length check before constant-time comparisonHMAC verification code path changed
0fb17623by M1nd3r+5−21 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore: update definitions timestamp

This commit simply updates a timestamp and a matching numeric version constant used for Ethereum token/chain definitions. There is no code logic change, no bug fix, and no security-relevant behavior change visible in the diff.

de494a07by PrisionMike+2−22 files
No security note in commit
Open full analysis →Source commit ↗
Low 43 AI analysisMessage 72 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

docs(core): changelog for 2.12.1

This commit is a documentation-only changelog update for the Trezor firmware 2.12.1 release. It does not change any code. The changelog mentions one security fix: a device-locking issue when only SD card protection is enabled. Because the …

Vendor-classified security fix: 'Fix device locking if only SD card protection is enabled' (#265)Privacy-related fix: 'Hide written characters in passphrase keyboard' (#6342) for T2T1/T3T1No code changes in the analyzed commit; security assessment relies on changelog metadata only
ac39a86dby PrisionMike+217−2415 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore: update releases.json

This commit simply adds one new firmware version number (2.12.1) to a list of released versions in a JSON metadata file. It does not change any code, cryptographic checks, or device behavior. There is no security issue visible in the chang…

a2f69d1aby PrisionMike+2−11 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 72 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core): changelog errors fixed.

This commit only edits changelog Markdown files. It removes duplicate or misplaced entries, marks some releases as 'internal release,' and adds device-model tags like [T2T1,T3T1] to existing notes. No firmware code, logic, or behavior is c…

914929b4by PrisionMike+18−765 files
No security note in commit
Open full analysis →Source commit ↗
Low 43 AI analysisMessage 85 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core): device should be lockable when SD protection is on

This update fixes a bug where a Trezor hardware wallet with SD-card protection enabled could not be locked if no PIN was set. The device should be lockable whenever SD protection is active, because the SD card itself acts as a security fac…

Access-control logic flaw: lock UI gated on PIN presence instead of actual lock capabilityFix aligns lockability predicate with existing can_lock_device() helperSD-protect-without-PIN scenario now covered by automated tests
99cc0249by Roman Zeyde+39−193 files
No security note in commit
Open full analysis →Source commit ↗
Informational 2 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore: upload signed secmon

This commit replaces a binary file called secmon.bin for the T3W1 hardware model with a 'signed' version. The actual contents of the binary file are not shown in the diff, so there is no visible code change to review. The commit message de…

e386995bby PrisionMike+0−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 72 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(translations): upload signed translations

This commit adds a new digital signature entry to a JSON file that records approved translation packages for Trezor hardware wallets. It is a routine administrative update with no code changes and no apparent security relevance.

67cc06e2by PrisionMike+7−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 18 AI analysisMessage 45 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

lint: Require scripted-diff script to succeed

This commit tightens a Bitcoin Core lint check that verifies 'scripted-diff' commits. Previously, the shell command running the script could silently ignore failures due to a fragile chain of '&&' and '||' operators. The fix makes the scri…

Hardening of CI lint scriptFailure to fail open in validation logicUse of stricter shell options (errexit, nounset, pipefail)
fab28742by MarcoFalke+7−31 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core/prodtest): add uptime command

This commit adds a simple diagnostic command called 'prodtest-uptime' to Trezor's production-test firmware. It only reports how long the device has been powered on, in milliseconds. There is no indication it changes security behavior, hand…

996062f2by tychovrahe+27−03 files
No security note in commit
Open full analysis →Source commit ↗
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this →