We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This change simply adds 'perf' to the list of allowed commit message types in a GitHub Actions workflow that checks whether commit messages follow a conventional format. It has no effect on the Krux software users run, on private keys, wal…
8e0ac0cbby odudex+1−11 fileThis change fixes a bug in how Lightning blinded paths choose a compact reference to the introduction node. Previously, the code could pick an old channel that was disabled or effectively closed, making the resulting BOLT 12 offer or blind…
0c352c55by Vincenzo Palazzo+161−01 fileThis commit adds a new feature to Trezor's Ethereum 'clear signing' system that lets wallet definitions extract a slice of bytes from a numeric parameter. For example, a 32-byte number that secretly packs an address into its last 20 bytes …
017cf136by PrisionMike+244−426 filesThis commit adds a new user-facing safety feature for Trezor hardware wallets when signing Ethereum transactions. If the user chooses to view all the raw transaction data (calldata), the device will now also show a final cryptographic hash…
10c82eddby Roman Zeyde+194−3222 filesThis commit adds a helper function in Bitcoin Core's graphical user interface code that safely connects a Qt signal to an anonymous function (lambda). It wraps the function so that if it throws an exception, the error is caught and reporte…
5907a5c7by Ava Chow+37−12 filesThis commit adds support in the rust-bitcoin P2P library for a new Bitcoin network message type called `feature`, defined by BIP 434. It also bumps the default protocol version from 70016 to 70017. This is a feature addition rather than a …
e1cbf080by rustaceanrob+29−14 filesThis commit adds a new, optional module implementing a Bitcoin protocol feature called BIP-434. It lets Bitcoin nodes advertise which new features they support during peer-to-peer handshake messages. The code only adds message parsing and …
622bd341by rustaceanrob+378−02 filesThis change updates Trezor's build script so that when core firmware is built, a 'translations Merkle root' is added to the reproducible-build fingerprints file. It also adds a command-line option to skip that step. The change is about bui…
a64fc5e3by Andrew Kozlik+24−31 fileThis commit only changes a test file to make it run faster by faking the system clock. It does not modify any production code, so it has no direct security impact on users of the Krux device or software.
9fecf150by qlrd+13−41 fileThis commit reorganizes the on-screen menu shown after a wallet key is generated or loaded in the Krux firmware. It splits the existing options into a two-level menu for newly generated mnemonics while keeping the old layout for existing o…
aed4b007by Naman015+44−51 fileThis commit only adds new automated tests for the wallet login flow. It does not change any production code, so it cannot introduce a security vulnerability or fix one directly. The tests verify that menu navigation works correctly when a …
21bd8e4cby Naman015+94−01 fileThis commit is a routine translation update. It adds or updates translated text strings for user interface labels such as "Continue", "Wallet Options", "Standard", and "Vertical" across multiple languages. There are no code logic changes, …
022b70d5by Naman015+71−123 filesA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.