CommitWatch RSS
F
← Developer activityStrong match

f321x

Public commit activity attributed with strong match confidence. This page describes observable work, not personal trustworthiness.

374 commits1 monitored projects23 candidates0 high-risk analyses
Project constellation

Where the commits appear

Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.

Monitored External sample
Projects connected to f321xA visual map of monitored and externally discovered repositories.Fdeveloper374Electrum
Monitored evidence

CommitWatch projects

ElectrumElectrum374 commits23 candidates0 high risk
External discovery

Other public projects

No external sample loaded yet.

A verified GitHub handle is needed before external discovery.
Analyzed activity

Recent published watches

Message quality and risk characterize commits, never the person.

Low 25 AI analysisMessage 68 · Adequate
EL ElectrumElectrum BitcoinSoftware wallets

trezor: drop session after closing it

This commit fixes a bug in Electrum's support for Trezor hardware wallets. After a Trezor session times out or is closed, Electrum now forgets the old session ID. Previously it kept the stale session ID, so the next attempt to sign a trans…

Fixes a stale-session reference that caused InvalidSessionError on re-authenticationEnsures PIN re-prompt after session timeout/closureFailure mode was denial-of-service (transaction signing crash), not unauthorized signing
071b1e24by f321x+8−51 file
No security note in commit
Open full analysis →Source commit ↗
Informational 18 AI analysisMessage 58 · Thin
EL ElectrumElectrum BitcoinSoftware wallets

qml: update ConfirmTxDialog onValidChanged

This is a small user-interface fix for the Electrum mobile/QML app. When sweeping private keys, the confirmation dialog that shows how much money will be moved initially displayed an amount of 0 because it did not refresh after the transac…

bd776e24by f321x+3−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 20 AI analysisMessage 100 · Strong
EL ElectrumElectrum BitcoinSoftware wallets

ci: security review: give more permissions to claude

This commit changes Electrum's automated CI security-review bot so that the Claude AI assistant is allowed to run shell commands and modify files on its own, rather than only answering questions. The change is intentional and runs inside a…

New command-line flag named `--dangerously-skip-permissions` introducedCI script now permits an AI agent to execute commands and modify files without interactive permission checksExecution context changed from root to unprivileged `node` user to satisfy Claude's refusal to run as root
39cdb23eby f321x+4−12 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 90 · Strong
EL ElectrumElectrum BitcoinSoftware wallets

tests: regtest: make test_just_in_time less flaky

This commit only changes a test script. It adds a wait helper so a test that opens two Lightning channels in a row does not fail randomly on continuous integration. There is no change to Electrum's actual wallet or Lightning code, so users…

12547f94by f321x+23−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 37 AI analysisMessage 97 · Strong
EL ElectrumElectrum BitcoinSoftware wallets

fix: remove negative fee assert from get_tx_fee_warning

This commit removes a hard crash (assertion) in Electrum's wallet code when a user loads a partially-signed Bitcoin transaction (PSBT) whose calculated fee is negative. Instead of crashing, Electrum now logs a warning and continues. A nega…

assertion replaced with warning lognegative transaction fee handlingPSBT loading robustness
06490657by f321x+2−11 file
No security note in commit
Open full analysis →Source commit ↗
Informational 21 AI analysisMessage 71 · Adequate
EL ElectrumElectrum BitcoinSoftware wallets

wizard: catch NotLegacySinglesigScriptType

This commit fixes a bug in Electrum's wallet setup wizard. Previously, if a user tried to import an individual private key for an unusual script type (like p2wsh), the wizard would crash with an internal error instead of showing a friendly…

Unhandled exception converted to user-facing errorImproves input validation and error handling in wallet import pathNo memory corruption, privilege escalation, or cryptographic weakness evident
543b73beby f321x+7−21 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 65 · Adequate
EL ElectrumElectrum BitcoinSoftware wallets

transaction: use dummy DER ECDSA sig from descriptor.py

This commit is a minor code cleanup. It replaces a locally-defined placeholder fake cryptographic signature with a shared constant from another file. The placeholder is only used to estimate transaction size and is never broadcast or used …

e9ac3e93by f321x+2−31 file
No security note in commit
Open full analysis →Source commit ↗
Low 37 AI analysisMessage 73 · Adequate
EL ElectrumElectrum BitcoinSoftware wallets

wallet: rbf: estimate base tx size before stripping

This commit fixes a fee-calculation bug in Electrum's Replace-By-Fee (RBF) feature. Previously, the wallet estimated the size of the original transaction after removing its signatures. Because removing signatures makes the transaction look…

Fee estimation accuracy bug in RBF pathTransaction size computed after signature strippingPotential replacement transaction rejected due to insufficient fee
a9f20e4dby f321x+7−61 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 65 · Adequate
EL ElectrumElectrum BitcoinSoftware wallets

qml: require authentication for message signing

This commit fixes a security gap in Electrum's mobile-style QML user interface. Previously, signing a message with one of your wallet's private keys did not ask for the user's payment authentication (PIN/password/biometric). Now it does. M…

Adds authentication gate (@auth_protect) to cryptographic signing operationChanges synchronous return to asynchronous signal to accommodate auth promptProtects private-key operation in QML GUI previously lacking re-authentication
5d314012by f321x+13−42 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Low 48 AI analysisMessage 65 · Adequate
EL ElectrumElectrum BitcoinSoftware wallets

qml: protect Address Private Keys from screenshots

This commit fixes a privacy gap in Electrum's mobile-style QML user interface. Previously, when you opened the details for a Bitcoin address and viewed its private key, the app window was not marked as 'secure,' meaning another app or the …

Private key material displayed in UI without screenshot protectionAddition of secureWindow binding tied to private key visibilityPrivacy/confidentiality hardening in wallet GUI
8e5ea8e1by f321x+6−01 file
Vendor flagged security relevance
Open full analysis →Source commit ↗
Low 45 AI analysisMessage 73 · Adequate
EL ElectrumElectrum BitcoinSoftware wallets

qml: remove pin code authentication

This commit removes the old 6-digit PIN authentication from Electrum's Android/QML interface and replaces it with a single 'Payment authentication' setting. When enabled, the app now uses the phone's built-in biometric or system PIN/passwo…

Removal of custom 6-digit PIN UI and storage (CONFIG_PIN_CODE)Replacement with Android system biometric/device-credential authenticationMinimum Android SDK raised from API 29 (Q) to API 30 (R)
47efb8b1by user+177−28411 files
No security note in commit
Open full analysis →Source commit ↗
Low 35 AI analysisMessage 55 · Thin
EL ElectrumElectrum BitcoinSoftware wallets

android: implement biometric authentication

This commit adds optional fingerprint unlock to the Electrum Android app. It stores an encrypted copy of the wallet password on the device, protected by Android's built-in biometric/keystore system. The change is a feature addition, not a …

New Android permission USE_BIOMETRIC addedNew Java activity handling biometric crypto operationsWallet password encrypted at rest using two-layer AES encryption
5dd3dda2by user+557−3510 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 85 · Strong
EL ElectrumElectrum BitcoinSoftware wallets

psbt_nostr: add EventListener comment to CosignerWallet

This commit only adds two explanatory comments to the code. It does not change any behavior, fix any bug, or alter any security mechanism. One comment clarifies that child classes of CosignerWallet must inherit from EventListener and regis…

e033a5e6by f321x+2−11 file
No security note in commit
Open full analysis →Source commit ↗
Informational 17 AI analysisMessage 73 · Adequate
EL ElectrumElectrum BitcoinSoftware wallets

bug: psbt_nostr: set CosignerWallet.pending on aio loop

This is a bug-fix patch for a crash in Electrum's optional PSBT-over-Nostr plugin. The plugin helps co-signers exchange partially-signed Bitcoin transactions. The crash happened because a background thread tried to update an asyncio synchr…

Thread-safety violation in asyncio event-loop usageCrash-only symptom (RuntimeError), no privilege escalation or data corruption evidentFix uses existing utility run_sync_function_on_asyncio_thread for cross-thread scheduling
0d380218by f321x+3−21 file
No security note in commit
Open full analysis →Source commit ↗
Low 49 AI analysisMessage 68 · Adequate
EL ElectrumElectrum BitcoinSoftware wallets

lnonion: make comparisons more constant time

This commit hardens Electrum's Lightning onion routing code against timing attacks. It replaces a normal HMAC comparison with a constant-time one, so an attacker can't learn secrets by measuring how quickly checks fail. It also changes how…

constant-time HMAC comparison addedonion error decoding loop fixed to 27 iterations to hide route lengthdummy shared secret used for padding iterations
0ae60d8bby f321x+24−81 file
Vendor flagged security relevance
Open full analysis →Source commit ↗
Informational 18 AI analysisMessage 45 · Thin
EL ElectrumElectrum BitcoinSoftware wallets

qml: add padding to ElDialog for android e2e

This commit adjusts on-screen spacing for the Android version of the Electrum wallet app so that dialog boxes avoid overlapping with the phone's system status and navigation bars. It is a user-interface layout fix, not a security patch. Th…

5f018091by f321x+26−113 files
No security note in commit
Open full analysis →Source commit ↗
Low 34 AI analysisMessage 85 · Strong
EL ElectrumElectrum BitcoinSoftware wallets

fix: psbt_nostr: don't allow to save tx without txid

This commit fixes a bug in Electrum's PSBT-over-Nostr plugin. Previously, the plugin could try to save a Bitcoin transaction to the wallet history even when the transaction didn't yet have a transaction ID (txid). Such transactions are inc…

Prevents saving incomplete transactions without txid to wallet historyAdds assertion enforcing txid presence before wallet persistenceUI now conditionally hides 'Save to Wallet' when txid is absent
478fb483by f321x+27−155 files
No security note in commit
Open full analysis →Source commit ↗
Informational 22 AI analysisMessage 100 · Strong
EL ElectrumElectrum BitcoinSoftware wallets

fix: wizard: qml: call checkIfLast in WCHaveSeed

This is a small UI bug fix in Electrum's mobile-style (QML) wallet setup wizard. When restoring a wallet from a seed phrase while another wallet was already open, the wizard wrongly showed a 'Finish' button instead of 'Next'. Clicking it c…

UI state inconsistency leading to application crash (KeyError)Regression from prior pull request #10016No cryptographic, authentication, or network security changes
e6f73522by f321x+5−11 file
No security note in commit
Open full analysis →Source commit ↗
Wrong identity?Names can collide and public author strings can be misleading.Contact commitwatch@karma-x.io →