Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.
This commit changes a single on-screen label in the Trezor bootloader from lowercase 'Change fw vendor' to uppercase 'Change FW vendor'. It is purely a cosmetic wording fix with no security relevance.
This commit adds a new user-facing safety feature for Trezor hardware wallets when signing Ethereum transactions. If the user chooses to view all the raw transaction data (calldata), the device will now also show a final cryptographic hash…
Adds user-verifiable calldata digest display (ERC-8213) to mitigate tampering of long Ethereum transaction dataHashes calldata with keccak256 seeded by total length, matching the ERC-8213 specification referenced in code commentsAdds a length-consistency check (confirmed_len == total_len) before displaying the digest
This commit only edits changelog text. It adds a more precise description of an already-released Ethereum feature (EIP-7702 support) and removes an older, less accurate changelog line. No code, transaction logic, or cryptographic behavior …
This commit adds support for signing Ethereum EIP-7702 authorizations and revocations on Trezor hardware wallets. EIP-7702 lets an Ethereum account temporarily delegate control to a smart contract. The code adds a new signing workflow, use…
New cryptographic signing path for EIP-7702 authorization tuplesHard-coded delegate allowlist restricts authorization to known contractsStrict safety checks block authorization but allow revocation
This commit only changes a test data file. It removes duplicate 'skip_models' entries from Ethereum EIP-7702 test fixtures so that the T2T1 model is no longer excluded from these tests. There is no change to firmware code, no security fix,…
This commit adds a new line on the Trezor screen when authorizing a CoinJoin: it now shows the 'Max coordinator fee rate' alongside the existing 'Max rounds' and 'Max mining fee'. This is a user-interface improvement that gives the device …
UI-only change: no authorization or fee-enforcement logic alteredNew user-visible field surfaces coordinator fee rate that was already present in the protocol messageNo new parsing, no buffer-size changes, no cryptographic operations
This commit fixes a UI lifecycle bug in Trezor firmware. The old `draw_simple()` function started a layout but did not properly wait for it to finish or stop it, which could leave stale UI tasks running ('scoping violations'). The new `int…
Fixes UI task lifecycle / scoping violationPrevents stale layout tasks from continuing after prompt should have endedPassphrase prompt flow affected
This commit is a straightforward internal code cleanup. It replaces several direct uses of a lower-level UI helper (`Layout(...).get_result()`) with a simpler wrapper function (`interact_simple`). The behavior described in the comments—spe…
This commit simply removes an unused on-screen message function called show_wait_text() from the Trezor firmware. There is no security fix or behavior change; it is a routine code cleanup.
This commit fixes a bug in the Trezor hardware wallet's user-interface code. Previously, certain simple on-screen messages were wrapped in a Python `with` block, which caused the underlying layout object to be cleaned up (dropped) as soon …
Use-after-free / premature object drop of UI layout with active event-handling tasksPotential crash or UI freeze during security-sensitive prompts (passphrase entry, wait screens)Incorrect lifetime management across Rust/MicroPython boundary
This is a minor user-interface polish change for the Trezor hardware wallet's Caesar layout. It removes an unnecessary blank line from transaction summary screens when either the amount label or the amount value is empty. There is no secur…
This commit changes how Trezor's Ethereum 'clear signing' helper data is loaded in memory. Previously, all definitions were stored in a permanent module-level list that MicroPython's garbage collector could not reclaim. The patch wraps the…
Memory pressure reduction: module-level rooted objects moved to generator-local scope to become collectable.No input validation, parsing, or cryptographic logic changed; only object lifetime and import scoping.No explicit security relevance disclosed by vendor; commit message frames change as a fix for garbage collection.
This commit fixes a visual glitch on the Trezor T3W1 device where the device menu would visibly jump or flicker when it refreshed. The fix preserves the menu's current scroll position across refreshes by passing an extra offset value throu…
No security-relevant signals observed in the diff.Change is described in changelog as '[T3W1] Fix device menu refresh.'No input validation, memory safety, cryptographic, or authorization changes are present.
This is a small internal code cleanup in the Trezor firmware's Ethereum transaction confirmation flow. It changes several function parameters from 'Iterable' (a general 'can be looped over' type) to 'Sequence' (a type that supports indexin…
Type-hint-only refactor with no runtime validation changesRemoval of list() allocation in caesar confirm_payment_requestNo explicit security claim in commit message or diff
This commit is a code cleanup that changes how user-interface layouts are managed in the Trezor firmware. It wraps layout objects in explicit context managers (using `with ... as layout:`) and converts several synchronous-looking helper fu…
Refactoring of UI layout lifecycle managementIntroduction/consistent use of context managers for layout scopingType annotation change from LayoutObj to LayoutContext
This commit is a code cleanup that wraps more on-screen UI layouts in a new 'layout context' scoping mechanism. It changes how layout objects are created and awaited, but does not add or remove security checks. The main risk is that any mi…
Large refactor touching UI layout lifecycle across multiple product variants (bolt, caesar, delizia, eckhart)Context-manager scoping may be a defensive pattern to prevent use-after-free or concurrent layout misuseNo explicit security relevance stated by vendor; marked [no changelog]
This commit only updates automated test scripts for the Trezor hardware wallet. It changes how the test code simulates button presses during a wallet backup flow to match the actual device behavior. There is no change to the firmware or wa…
This commit is a follow-up code cleanup that wraps more on-screen user-interface helpers in a new 'layout context' pattern. It changes type annotations from LayoutObj to LayoutContext and converts several synchronous-looking wrapper functi…
Refactoring of UI object lifetime management (LayoutContext scoping)No new input validation, parsing, or cryptographic operations visibleNo explicit security relevance stated by vendor in commit message or title
This commit removes calls to an old, already-deprecated debug-only feature named DebugLinkWatchLayout from the Python test library and test scripts. It is a cleanup change affecting only testing and developer tooling, not the firmware that…
This commit is a follow-up code cleanup that wraps more on-screen layout calls in Python 'with' blocks. It changes return-type annotations from LayoutObj to LayoutContext and makes several UI helper functions async. There is no direct evid…
Refactoring only: no change to cryptographic, authentication, or authorization logicType annotation change from LayoutObj to LayoutContextIntroduction/consistent use of context-manager scoping for UI layouts