Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.
This commit updates a QA/testing bootloader binary and its recorded cryptographic hash for the T3W1 hardware model. It is a routine development chore with no visible security fix or vulnerability.
This commit is a documentation-only changelog update for the Trezor firmware releases core 2.11.2 and bootloader 2.1.17. It does not change any code. The changelog lists several previously fixed security issues, including bugs in Solana ac…
Changelog explicitly categorizes PRs #246, #248, #249 as SecurityEIP-712 domain caching may relate to transaction-signing spoofing or replaySolana ALT recipient/account-type parsing fixes suggest possible incorrect recipient display or funds misdirection
This commit replaces the signed bootloader binary for the Trezor T3W1 hardware wallet model and updates the matching cryptographic hash list. The change is a routine version bump from bootloader version 2.1.16.0 to 2.1.17.0. The commit mes…
Opaque binary update of a security-critical bootloader componentVersion bump from 2.1.16.0 to 2.1.17.0 without stated security relevanceNo source diff or changelog visible in the commit
This commit is a routine housekeeping change that only updates version numbers in several files. It does not change any program logic, fix any bug, or alter any security behavior. There is nothing here that could be exploited or that affec…
This commit fixes an off-by-one-style bounds check in the Ethereum clear-signing code on Trezor hardware wallets. The old check only verified that the starting position was inside the data, but did not verify that the code was about to rea…
This commit adds a new feature to Trezor Ethereum signing that lets the device ask the connected computer or phone for extra token/contract display information during a transaction. It is a feature addition (not a direct bug fix), so it ma…
New wire protocol messages added (EthereumDefinitionRequest / EthereumDefinitionAck)Device now accepts externally supplied token/network definitions and display formats mid-signingHost-side callback (definition_provider) can return arbitrary definitions
This commit changes how Trezor displays Ethereum token-approval amounts that exceed a safety threshold. Previously, the code returned 'None' for such large amounts, and the user interface fell back to a generic 'Unlimited amount' warning. …
UI-only change in Ethereum token-approval flowExplicit sentinel replaces implicit None for above-threshold amountsNo change to signing, parsing, or access-control logic
This commit is a simple renaming cleanup. It changes identifiers like 'EthereumERC7730DisplayFormatInfo' to 'EthereumDisplayFormatInfo' and 'ETHEREUM_ERC7730_DISPLAY_FORMAT' to 'ETHEREUM_DISPLAY_FORMAT' across protobuf definitions, generat…
This commit changes how Trezor handles Ethereum transactions with large amounts of embedded data. Previously, the device always tried to 'clear sign' (show human-readable details on screen) for every transaction. Now, if the transaction da…
Behavioral guard added to skip parser on oversized calldataFallback to blind signing explicitly preservedComment indicates architectural limitation in clear-signing data fetching
This commit only adds and updates automated tests for Trezor's Ethereum 'clear signing' feature (ERC-7730 display formats). It does not change the firmware's security logic, so it is not a security patch. The tests verify that malformed or…
Adds negative tests for invalid ERC-7730 definition signatures and malformed payloadsAdds positive tests for clear signing with token amount formattingNo changes to firmware parsing, validation, or signing code
This commit only adds stronger checks to existing automated tests for Ethereum 'clear signing' on Trezor devices. It does not change any firmware, wallet, or production code, so it cannot introduce a security vulnerability or fix one in sh…
This commit adds support for a new Ethereum feature called ERC-7730, which lets a computer (like a wallet app) tell a Trezor device how to display and interpret smart-contract transaction data in a human-friendly way. It also changes the m…
New attack surface: host-supplied protobuf definitions are decoded and used to parse transaction calldata and drive on-screen displayParsing logic added for ABI tuples, arrays, atomic and dynamic types; malformed definitions could trigger exceptions or unexpected behaviorContext check (chain_id/address/func_sig) is performed before applying an external display format, which limits cross-contract replay
This commit only updates version numbers and translation metadata. It changes the firmware version from 2.11.1 to 2.11.2, the security monitor version from 1.0.8 to 1.0.9, and updates the translation files' version headers and signature me…
This commit is a code cleanup that moves the on-screen confirmation flow for Ethereum 'clear signing' into the device's UI layout modules. It also adds a final summary screen showing the maximum transaction fee. There is no direct evidence…
UI flow refactor for transaction confirmationNew maximum fee summary screen added to clear-signing pathRecipient display fallback changed from None to raw msg.to for unknown addresses
This commit fixes how Trezor displays details for certain 1inch cryptocurrency swap transactions. Previously, the device tried to interpret a parameter called 'pools' as a list of plain numbers, but it actually contains packed binary data.…
Transaction display misclassification: a bytes field was being parsed as uint256 array, potentially showing misleading information to the userClear-signing registry mismatch: the EIP-7730 registry description did not match actual 1inch calldata encodingUser confirmation UI change: previously only the last pool was shown with a unit formatter; now the full raw pools bytes are shown as hex
This commit only adds new test cases for Ethereum transaction signing on Trezor hardware wallets. It includes sample swap transactions from services like 1inch, LiFi, and Uniswap, plus a large-data test case. There is no change to the actu…
This commit adds human-readable labels for certain cryptocurrency swap transactions on Trezor hardware wallets. It does not change how transactions are validated or signed; it only improves what the user sees on the device screen. There is…
Adds display-only metadata for DeFi swap contractsNo changes to cryptographic or authorization codePotential risk if field paths or token addresses are mislabeled, leading to user confusion
This commit is a code refactor that reorganizes how Trezor handles Ethereum transaction display logic. It splits existing code into new modules for 'clear signing' and staking, and changes how token amounts and addresses are formatted befo…
Refactor of transaction confirmation UI logic for Ethereum token transfers and approvalsNew unknown-token confirmation path added for transfer transactionsAmount formatting and address parsing logic moved between modules
This commit only adds two new user-facing text strings ('Confirm contract' and 'Intent') to the Trezor firmware's translation system. It does not change any code logic, security checks, or transaction handling. There is no indication this …
This commit removes an old, duplicated screen called flow_confirm_output and makes the confirm_output function always use the newer confirm_value-based flow. There is no security bug being fixed here; it is a cleanup that unifies how trans…