← Developer activityStrong match

Dmitry Monakhov

Public commit activity attributed with strong match confidence. This page describes observable work, not personal trustworthiness.

2 commits1 monitored projects1 candidates1 high-risk analyses

Project constellation

Where the commits appear

Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.

Monitored External sample

Monitored evidence

CommitWatch projects

COLDCARD firmwareCoinkite2 commits1 candidates1 high risk

External discovery

Other public projects

No external sample loaded yet.

A verified GitHub handle is needed before external discovery.

Analyzed activity

Recent published watches

Message quality and risk characterize commits, never the person.

Low 33 AI analysisMessage 73 · Adequate

2 months, 4 weeks ago

CK CoinkiteCOLDCARD firmware BitcoinHardware wallets

Fix BBQr share of Unicode text: encode str to UTF-8 before sizing/splitting

This commit fixes a bug in the COLDCARD Q1 hardware wallet where displaying certain QR codes containing non-English or special characters could cause the device to crash with an assertion failure. The fix ensures text is converted to UTF-8…

Assertion failure/crash in QR display pathLength mismatch between codepoints and UTF-8 bytesDenial-of-service-like symptom (device crash on user data display)

97d86c95by Dmitry Monakhov+5−01 file

No security note in commit

Open full analysis →Source commit ↗

High 72 AI analysisMessage 73 · Adequate

3 months ago

CK CoinkiteCOLDCARD firmware BitcoinHardware wallets

Don't restore cached backup password (bkpw) from backup file

This update fixes a security flaw in how the COLDCARD wallet restores its settings from a backup file. Previously, a tampered backup could secretly set the password used for future backups, letting an attacker who later gets physical acces…

Tampered-backup password fixationBackup restore integrity hardeningCached secret import prevention

8d71040aby Dmitry Monakhov+7−01 file

Vendor flagged security relevance

Open full analysis →Source commit ↗

Wrong identity?Names can collide and public author strings can be misleading.Contact commitwatch@karma-x.io →