We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit only updates user documentation and the changelog to describe a recent user-interface change for generated mnemonics. It does not modify any code, cryptographic logic, or security behavior, so it has no direct security relevanc…
c0759d9eby Naman015+6−12 filesThis commit only updates user documentation. It adds new screenshots showing how to create a new wallet mnemonic and updates the script that automatically generates those screenshots. There are no code changes that affect security.
61807e7eby Naman015+39−38 filesThis commit is a simple code cleanup: it pulls duplicated code for drawing a wallet information screen into a single reusable helper function. There is no change to what the program does, no new behavior, and no security issue visible in t…
1b068748by odudex+41−441 fileThis commit only edits changelog text. It adds a more precise description of an already-released Ethereum feature (EIP-7702 support) and removes an older, less accurate changelog line. No code, transaction logic, or cryptographic behavior …
d12287b5by Roman Zeyde+1−12 filesThis commit only changes a test data file. It removes duplicate 'skip_models' entries from Ethereum EIP-7702 test fixtures so that the T2T1 model is no longer excluded from these tests. There is no change to firmware code, no security fix,…
1f20560eby Roman Zeyde+0−81 fileThis commit adds support for signing Ethereum EIP-7702 authorizations and revocations on Trezor hardware wallets. EIP-7702 lets an Ethereum account temporarily delegate control to a smart contract. The code adds a new signing workflow, use…
0cd72f03by Roman Zeyde+1130−015 filesThis commit is a routine dependency update that bumps the bundled 'embit' library to a newer commit. No actual code changes are shown, and no security relevance is stated in the commit message or title.
77fc9698by odudex+1−11 fileThis is a routine maintenance update to an internal developer tool that bumps software version numbers. It adds support for four-part version numbers, fixes a Python path, and makes the script regenerate an error-codes file after updating …
010a3c41by Martin Milata+56−481 fileThis commit adds support for more Ethereum data types in Trezor's clear signing feature. It introduces parsing for signed 160-bit integers (int160) and fixed-size byte arrays of various lengths (bytes4, bytes8, bytes16, bytes20, bytes32). …
1e146d45by PrisionMike+181−578 filesThis commit only adds new automated tests for Electrum's Lightning payment routing code. It checks that internal 'liquidity hints' correctly track in-flight payment parts and are cleaned up after multipart payments succeed or time out. The…
2f82eca1by f321x+33−02 filesThis commit fixes a bug in Electrum's Lightning payment routing. Previously, when a multi-part payment succeeded, only the first successful payment chunk properly updated the wallet's internal channel-liquidity bookkeeping. Later chunks we…
b176c50aby f321x+8−122 filesThis commit loosens Eclair's validation of BOLT12 invoice onion messages so that invoices may now include a reply path. Previously, Eclair rejected invoices that carried a reply path, which caused compatibility problems with LDK nodes. The…
79519244by Bastien Teinturier+14−62 filesA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.