We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit only adds new automated tests for signing Stellar Soroban authorizations. It does not change any production firmware, wallet logic, or cryptographic code. There is no security vulnerability here.
72511927by Jun Luo+538−04 filesThis commit is a routine maintenance update for the Stellar feature in Trezor firmware. It adds three new user-facing text strings (for device screen prompts), updates translation signatures, refreshes expected test screenshot hashes, and …
94d39e3cby obrusvit+169−606 filesThis commit adds rate limits and maximum attempt caps for Replace-By-Fee (RBF) closing transactions in the Eclair Lightning node. Previously, a peer could repeatedly propose new closing transactions without strict limits, which could waste…
687485fcby Bastien Teinturier+94−103 filesThis commit adds a new automated test to the Electrum project. It does not change any production wallet or Lightning code. The test verifies that when Electrum splits a multi-part payment across a single channel, all payment parts actually…
14f7fa0bby f321x+22−01 fileThis commit is purely a test-code refactoring: it moves Lightning Network test helpers (graph definitions and an invoice preparation function) from one test file to another shared helper file. There is no change to production code, no secu…
e281a4c4by f321x+185−1852 filesThis commit fixes a bug in Electrum's Lightning payment logic. When sending a payment split into multiple parts over a single channel, the app could previously ignore the intended channel and route all parts through a different channel tha…
bf1b4a1bby f321x+1−21 fileThis commit fixes a flaky automated test, not a security bug. It adds a wait so the test only checks payment statuses after internal cleanup layers called 'xpay-<n>' have been removed. There is no change to production code or user-facing b…
dafba953by ScuttoZ+11−01 fileThis commit is a minor code cleanup in a Python helper script. It moves existing bootloader connection logic into a small nested helper function to satisfy a style checker (pylint's limit on the number of return statements). No behavior ch…
886113d0by benma's agent+10−61 fileThis commit is a small internal code cleanup in Bitcoin Core. It removes the ability of a utility called LineReader to accept raw byte buffers, and updates two network components (Tor control connection and HTTP server) to use ordinary std…
dff44e4cby Hodlinator+5−76 filesThis is a small internal code cleanup in Bitcoin Core. It rewrites a helper class called LineReader so it works directly with string data instead of converting bytes to strings back and forth. There is no user-facing change, no bug fix, an…
5d5cdcd7by Hodlinator+27−283 filesThis is a purely cosmetic change to how firmware binary file sizes are displayed in GitHub CI build summaries. It swaps the order of columns (size first, filename second) and adjusts alignment/sorting so the output is easier to read. There…
7fccc2c2by Roman Zeyde+1−11 fileThis commit is a routine release bookkeeping change. It updates the version number from v9.27.0 to v9.26.5 and reorganizes the changelog so that two bug fixes are listed under the new v9.26.5 release section instead of 'Unreleased'. The ac…
51ce24e6by benma's agent+5−22 filesA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.