CommitWatch RSS
K
← Developer activityStrong match

kkdao

Public commit activity attributed with strong match confidence. This page describes observable work, not personal trustworthiness.

@kkdao on GitHub ↗
12 commits1 monitored projects0 candidates0 high-risk analyses
Project constellation

Where the commits appear

Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.

Monitored External sample
Projects connected to kkdaoA visual map of monitored and externally discovered repositories.Kdeveloper12Krux
Monitored evidence

CommitWatch projects

KruxKrux12 commits0 candidates0 high risk
External discovery

Other public projects

No external sample loaded yet.

Authenticated GitHub discovery can enrich this profile.
Analyzed activity

Recent published watches

Message quality and risk characterize commits, never the person.

Low 34 AI analysisMessage 62 · Adequate
KX KruxKrux BitcoinHardware wallets

refactor: narrow parse_address fallbacks to EmbitError in wallet.py

This change fixes a bug where pressing a device's cancel/back button during address parsing could be ignored or misreported as an 'invalid address' instead of letting the user exit. The code previously caught every possible error (includin…

Bare exception handler narrowed to specific library exceptionUser-triggered interrupt (KeyboardInterrupt) no longer swallowedRegression test added for interrupt propagation in both code branches
a5fb4737by kkdao+24−32 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 62 AI analysisMessage 93 · Strong
KX KruxKrux BitcoinHardware wallets

fix: reject base58 address with unknown version byte in parse_address

This fix closes a hole where a Bitcoin address that looks valid (correct checksum) but belongs to no known network could be accepted by Krux's address parser. Before the patch, the parser only caught thrown errors; because the underlying l…

Input validation bypass fixedBase58 address version byte not validated before fixLibrary silent failure (None return) not handled by caller
63e8b8e5by kkdao+20−12 files
No security note in commit
Open full analysis →Source commit ↗
Low 34 AI analysisMessage 62 · Adequate
KX KruxKrux BitcoinHardware wallets

refactor: catch Exception, not bare except, in parse_wallet fallbacks

This commit tightens error handling in Krux's wallet parsing. Previously, the code used bare 'except:' clauses that would catch everything, including KeyboardInterrupt and SystemExit. Those special exceptions should normally be allowed to …

Bare except clauses replaced with except Exception to avoid swallowing KeyboardInterrupt/SystemExitNew regression test ensures KeyboardInterrupt propagates through all parse_wallet fallback branchesComments explicitly call out untrusted input and interrupt propagation behavior
6f617710by kkdao+42−72 files
No security note in commit
Open full analysis →Source commit ↗
Low 35 AI analysisMessage 85 · Strong
KX KruxKrux BitcoinHardware wallets

refactor: drop non-dict JSON coercion in encryption storage

This commit changes how Krux loads its encrypted seed storage file. Previously, if the file contained valid JSON but in the wrong shape (for example, a list instead of a dictionary), the app would silently treat it as empty and overwrite i…

Behavior change in persistence layer: malformed-shape but valid JSON is no longer silently normalized to empty dictPotential data-loss vector removed: previous code would overwrite a non-dict seeds.json on next storeCrash-prevention guard retained in decrypt() for non-dict storage
2d195ad3by kkdao+3−622 files
No security note in commit
Open full analysis →Source commit ↗
Low 34 AI analysisMessage 85 · Strong
KX KruxKrux BitcoinHardware wallets

refactor: narrow mnemonic storage file-load errors

This commit is a defensive code cleanup, not an active vulnerability fix. It narrows four broad 'catch-everything' error handlers in the wallet's encrypted mnemonic storage module so they only ignore expected file/JSON problems. Unexpected…

Broad exception suppression narrowed to expected (OSError, ValueError)Unexpected errors now propagate instead of being silently swallowedDecrypt and write paths retain broad catches, now explicitly commented
aebbfc92by kkdao+195−42 files
No security note in commit
Open full analysis →Source commit ↗
Low 29 AI analysisMessage 95 · Strong
KX KruxKrux BitcoinHardware wallets

fix: return None when decrypting an unknown or non-dict mnemonic id

This commit fixes a small bug in how Krux loads saved encrypted seed data. Previously, if the saved file was valid JSON but shaped like a list instead of a dictionary, or if the requested seed ID was missing, the code could crash with an A…

Fixes exception-handling bug that could crash decrypt() on missing or malformed storage entriesAdds input validation for JSON shape (dict vs list/other) when loading mnemonic storageAdds unit tests covering malformed/non-dict JSON and unknown mnemonic IDs
a2882082by kkdao+101−102 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 62 · Adequate
KX KruxKrux BitcoinHardware wallets

refactor: dedupe flipped-orientation check in touch.py via is_flipped_orientation

This commit is a simple code cleanup: it replaces two copies of the same display-orientation check with a single shared helper method. There is no security-relevant change in behavior; the logic before and after is functionally identical.

a0924c7cby kkdao+4−82 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 85 · Strong
KX KruxKrux BitcoinHardware wallets

refactor: read Settings() once in display.py orientation/init paths

This is a straightforward internal code cleanup: it reads device settings once and reuses the result instead of reading them multiple times. The commit message and diff show no change in behavior, no bug fix, and no security relevance.

5eb27afeby kkdao+12−131 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 85 · Strong
KX KruxKrux BitcoinHardware wallets

refactor: dedupe flipped-orientation check via is_flipped_orientation

This commit is a straightforward internal cleanup: it moves a repeated screen-rotation check into a single shared helper and makes that helper use its existing object instead of creating new temporary settings objects. There is no user-fac…

3decdfd0by kkdao+4−102 files
No security note in commit
Open full analysis →Source commit ↗
Low 37 AI analysisMessage 100 · Strong
KX KruxKrux BitcoinHardware wallets

fix: narrow bare except blocks to stop hiding real errors (#877)

This commit tightens several 'catch-all' error handlers in the Krux firmware so they only catch the specific problems they intend to handle. Previously, these handlers would also swallow serious system-level signals such as KeyboardInterru…

Bare except blocks narrowed to specific exception typesKeyboardInterrupt and other BaseException signals no longer swallowedRegression tests added to prevent silent error suppression
c2048960by kkdao+98−56 files
No security note in commit
Open full analysis →Source commit ↗
Low 48 AI analysisMessage 93 · Strong
KX KruxKrux BitcoinHardware wallets

fix: make settings reads non-mutating and harden malformed settings handling (#874)

This commit fixes bugs in how Krux reads and writes its saved settings. Previously, simply reading a setting could silently change the stored data, and a corrupted settings file (for example, one where a category was accidentally a word in…

Eliminates read-side mutation of settings state that could alter persisted configuration unexpectedlyHardens settings parsing against corrupted or hand-edited persisted JSONValidates persist.location against an allow-list of known paths, preventing type errors and unintended storage selection
7368ca45by kkdao+170−222 files
No security note in commit
Open full analysis →Source commit ↗
Wrong identity?Names can collide and public author strings can be misleading.Contact commitwatch@karma-x.io →