CW
← Developer activityStrong match

Cedric Wiese

Public commit activity attributed with strong match confidence. This page describes observable work, not personal trustworthiness.

23 commits1 monitored projects7 candidates0 high-risk analyses
Project constellation

Where the commits appear

Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.

Monitored External sample
Projects connected to Cedric WieseA visual map of monitored and externally discovered repositories.CWdeveloper23BitBox02 firmware
Monitored evidence

CommitWatch projects

External discovery

Other public projects

No external sample loaded yet.

A verified GitHub handle is needed before external discovery.
Analyzed activity

Recent published watches

Message quality and risk characterize commits, never the person.

Informational 15 AI analysisMessage 45 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

swap: make long destination amounts scrollable

This commit makes a single on-screen message scrollable. When swapping cryptocurrency, the destination amount can be very long and previously may have been cut off or unreadable. The change lets the user scroll through the full text before…

c116b0a8by Cedric Wiese+1−01 file
No security note in commit
Low 28 AI analysisMessage 45 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

ethereum: support payment requests for eip1559

This commit adds support for EIP-1559 Ethereum transactions in the BitBox02's payment-request (swap) feature. It lets users verify and sign Ethereum and ERC-20 token swaps that include a merchant payment request, similar to what already ex…

New user-facing signing path for EIP-1559 payment requestsPayment-request validation now covers both BTC and ETH/ERC-20 source assetsPlain ETH swaps require empty transaction data
38d26b42by Cedric Wiese+504−285 files
No security note in commit
Informational 15 AI analysisMessage 55 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

ethereum: extract total fee verification helpers

This commit is a simple code cleanup: it moves two existing blocks of Ethereum fee-verification logic into new helper functions without changing what the code actually does. There is no visible security fix or behavior change.

f3aeae28by Cedric Wiese+31−111 file
No security note in commit
Informational 17 AI analysisMessage 45 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

messages: add eth payment request fields

This commit adds a new optional 'payment request' field to Ethereum EIP-1559 signing requests in the BitBox02 firmware's protocol definitions and generated code. It does not contain any actual implementation of how that field is processed,…

New optional protobuf field added to a signing request messageNo validation or processing logic for the new field visible in the diffOnly test fixtures updated to include the new field as None
21a01dcaby Cedric Wiese+63−435 files
No security note in commit
Informational 19 AI analysisMessage 50 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Api: Make payment_request generic instead of bitcoin specific

This commit is a code cleanup that makes the payment-request code less Bitcoin-specific so it can be reused for other coins in the future. It does not add new user-facing features or fix a known bug. The changes move amount formatting and …

Refactor only: no new cryptographic operations, no change to trust boundaries, no change to signature verification algorithm.Amount comparison in `validate()` remains byte-for-byte against `payment_request.total_amount.to_le_bytes()`, preserving prior semantics for 64-bit little-endian values.UI text formatting is moved to the caller; this does not remove user confirmation, only changes where the formatted string is produced.
b7e8f580by Cedric Wiese+281−982 files
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Api: Move payment_request from bitcoin to api module

This commit is a pure code refactor: it moves the payment_request module from the bitcoin-specific directory up to the general API directory. The actual logic, security checks, and behavior of the payment request code are unchanged. No new…

b627ca50by Cedric Wiese+1376−13764 files
No security note in commit
Low 28 AI analysisMessage 50 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Btc: Add btc address derivation to coin purchase memo in payment request

This commit adds support for deriving and verifying Bitcoin-family destination addresses inside payment-request memos used for coin swaps. It extends the existing Ethereum-only address-derivation feature to also cover BTC/LTC, and validate…

New address-derivation validation path for BTC/LTC payment-request memosAddress mismatch check between derived address and memo-supplied addressInput validation: coin_type/unit consistency, simple-single-sig only, hardened account keypath element
9eb4fd04by Cedric Wiese+520−415 files
No security note in commit
Low 37 AI analysisMessage 45 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Swap: Add swap ui flow (BTC/LTC -> ETH-like)

This commit adds a new on-device user interface flow for cryptocurrency swaps, where a user can exchange Bitcoin or Litecoin for an Ethereum-like coin through a payment request. The code adds validation rules and user confirmation screens …

New UI confirmation flow for cross-chain swapsInput validation added for swap amount string parsingRestriction of swap source accounts to BTC/LTC single-sig configurations
cc45c948by Cedric Wiese+610−12 files
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Py: avoid brittle Bootloader import in editable installs

This is a minor Python import cleanup in a developer/test script. It changes how one internal class is imported so that the script works reliably when installed in 'editable' mode. There is no security issue here.

faebccd4by Cedric Wiese+3−21 file
No security note in commit
Informational 18 AI analysisMessage 45 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Btc: accept SWAPKIT payment request identities

This commit adds a new trusted Bitcoin payment-request signer called SWAPKIT to the BitBox02 hardware wallet. It also makes matching more flexible for SWAPKIT so names like 'swapkit (Provider)' or 'SwapKit' are accepted. The change is a ro…

Addition of a new trusted signing identity to a payment-request allow-listCase-insensitive substring matching for one identity only, increasing name flexibilityNo validation, parsing, or cryptographic logic changes beyond identity lookup
39659c65by Cedric Wiese+37−21 file
No security note in commit
Informational 13 AI analysisMessage 57 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Build: move host hardware fakes into bitbox02-sys

This is a build-system cleanup, not a security fix. It moves test-only fake hardware code into a lower-level Rust crate and adds a linker trick so the fake disk storage implementation is not accidentally left out when building the desktop …

191a5982by Cedric Wiese+38−278 files
No security note in commit
Informational 15 AI analysisMessage 45 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Ui: Display address in groups of 4 characters

This commit only changes how wallet addresses are shown on the BitBox02 screen. It inserts spaces every four characters (for example, a Bitcoin address becomes "bc1q k5f9 em9q ..." instead of one long string). There is no code that changes…

a871abc7by Cedric Wiese+215−7812 files
No security note in commit
Low 27 AI analysisMessage 45 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Add coin purchase memo support

This commit adds a new 'coin purchase memo' feature to BitBox02 payment requests. It lets a payment request include details about a separate coin purchase (e.g., '0.25 ETH to address 0x...') and verifies that the listed Ethereum address re…

New payment-request memo type with address ownership verification via keypath derivationTODO left in user_verify indicating UI confirmation for CoinPurchaseMemo is not yet implementedCross-module dependency introduced: Bitcoin payment-request validation now calls Ethereum address derivation
10746100by cedwies+419−418 files
No security note in commit
Low 49 AI analysisMessage 62 · Adequate
BB BitBoxBitBox02 firmware BitcoinHardware wallets

fix: validate max_fee_per_gas zero prefix in EIP-1559

This commit fixes a typo-like bug in the BitBox02 hardware wallet's Ethereum transaction signing code. The firmware was supposed to reject a 'max_fee_per_gas' value that has an unnecessary leading zero byte, but it was accidentally checkin…

Incorrect field validated in EIP-1559 transaction parserLeading-zero canonicalization check bypassed for max_fee_per_gasPotential transaction-hash mismatch between host and device
ee6e1ceeby cedwies+27−11 file
No security note in commit
Moderate 51 AI analysisMessage 83 · Strong
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Bug: Fix BLE Random Data Overlap

This commit fixes a bug in the BitBox02 hardware wallet firmware where two Bluetooth privacy values were accidentally created from overlapping random bytes. The device intended to use the first 16 random bytes for a secret key (IRK) and a …

Information disclosure: 6 bytes of the 16-byte BLE Identity Resolving Key leaked into the public BLE identity address.Privacy weakening: partial IRK exposure reduces the effectiveness of BLE privacy/resolving mechanisms.Bug class: off-by/incorrect buffer offset in memcpy.
66aaab28by cedwies+55−12 files
Vendor flagged security relevance
Informational 18 AI analysisMessage 35 · Opaque
BB BitBoxBitBox02 firmware BitcoinHardware wallets

HAL: add reboot_to_bootloader()

This commit is a straightforward internal refactoring: it moves the device-reboot-into-bootloader function behind a new 'System' hardware-abstraction trait so the rest of the Rust code calls it through a generic interface rather than direc…

Refactoring only: no change to reboot preconditions or user confirmation flowReboot capability remains behind existing authenticated HWW API and user confirmationNo new unsafe code introduced; one existing unsafe call is unchanged
afcdcbe3by cedwies+40−83 files
No security note in commit
Informational 18 AI analysisMessage 70 · Adequate
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Refactor multisig_get/set_by_hash into HAL

This commit is a code cleanup that moves multisig account storage operations behind a hardware-abstraction layer so tests can use a fake memory instead of real device memory. It does not appear to fix or introduce a security vulnerability.…

Refactoring only: no change to production memory access semanticsHash type narrowed from Vec<u8> to [u8; 32], reducing risk of length confusionTest-only bug fixed: registration and subsequent API call now share the same TestingHal instance
508cf98fby cedwies+212−996 files
No security note in commit
Informational 15 AI analysisMessage 58 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Regenerate Python protobuf stubs

This commit only fixes the formatting of license headers in automatically generated Python type-stub files. It moves the SPDX license notice from a standalone comment line into the generated docstring block. There is no change to program l…

cb71f488by cedwies+11−3111 files
No security note in commit
Informational 18 AI analysisMessage 55 · Thin
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Move "get_attestation_*" functions to HAL

This commit is a code cleanup and test-improvement change. It moves two device-attestation helper functions from a direct hardware call into a software 'hardware abstraction layer' (HAL) so the code can be tested without the real device. I…

Refactor only: no change to cryptographic operations, trust model, or data flowAttestation still uses SHA-256 of host challenge and secure-chip signingAdded unit tests increase coverage for attestation success and missing-certificate failure paths
45355e61by cedwies+147−62 files
No security note in commit
Informational 12 AI analysisMessage 90 · Strong
BB BitBoxBitBox02 firmware BitcoinHardware wallets

Move salt_root functions to HAL

This commit is a straightforward internal refactoring: it moves access to a device secret called the 'salt root' behind an existing hardware-abstraction layer so that automated tests can use a fake memory instead of real device memory. The…

d0db51a2by cedwies+65−373 files
No security note in commit
Wrong identity?Names can collide and public author strings can be misleading.Contact commitwatch@karma-x.io →