BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2923 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

258security candidates613second-pass queue2891AI analyses
195commits · 30 days
469commits · 60 days
1488commits · 180 days
2867commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
959Strong · 80–100
1188Adequate · 60–79
688Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow16351161065
MarcoFalke41021406074
Lőrinc17721177081
fanquake22819226057
Hennadii Stepanov21214208063
rkrux57957074
Sjors Provoost89889074
merge-script36718088
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Analysis record

Published AI watches

Last scanned 22 minutes ago

Low 28 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35959: Update secp256k1 subtree to latest master

This commit updates Bitcoin Core's embedded copy of the secp256k1 cryptographic library to a newer version. The update adds a new Silent Payments module, lets advanced users swap in a custom SHA256 compression function, removes some old de…

Dependency update of a core cryptographic library (libsecp256k1)New runtime SHA256 compression callback with self-test/smoke test to catch mis-implementations earlyBehavior change in ellswift_xdh to reject secret keys >= curve order (vendor states not a security issue)
625f951bby Ava Chow+297−11626 files
No security note in commit
Informational 23 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35605: wallet: rpc: Deprecate `removeprunedfunds` RPC

This commit deprecates a Bitcoin Core wallet RPC command called removeprunedfunds. The command lets users delete transactions from their own wallet, which can alter displayed balances. The change does not fix a software bug; it is a cleanu…

RPC allows deletion of arbitrary wallet transactions, affecting balancesDeprecation framed by authors as removing a dangerous and maintenance-burden featureNo authentication bypass, memory corruption, or consensus change present in diff
e9ed5e83by Ava Chow+64−695 files
No security note in commit
Informational 18 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35930: wallet: post-#35501 cleanups in CWalletTx

This is a follow-up cleanup and hardening patch for the Bitcoin Core wallet's handling of transactions that have multiple possible witness versions (same transaction ID but different witness data). It renames a variable, simplifies a helpe…

Added input-validation during wallet transaction deserializationNew unit test specifically exercises rejection of mismatched variant txidFollow-up to PR #35501 which introduced witness-variant tracking in the wallet
512dc9afby Ava Chow+68−315 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35729: refactor: test: Unroll `&&` conditions in macros

This commit only changes Bitcoin Core's internal test code. It splits combined conditions inside test-check macros (like BOOST_CHECK(a && b)) into separate checks so that when a test fails, the test output points to the exact failing condi…

aa0e0f79by merge-script+196−9519 files
No security note in commit
Low 26 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35493: wallet, descriptor: Fix MuSig private key completeness checks on `importdescriptors`

This commit fixes a bug in Bitcoin Core's wallet import logic for a new type of multi-signature setup called MuSig. Previously, when a user imported a MuSig descriptor that already contained all needed private keys, the wallet incorrectly …

False-positive warning in wallet import for fully-private MuSig descriptorsIncorrect private-key completeness check on synthetic aggregate public keyDescriptor logic now delegates completeness to `Descriptor::HavePrivateKeys()`
2c01832fby merge-script+76−374 files
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35943: doc: fix dead link in txrequest.h

This commit only fixes a broken web link in a code comment. It replaces an outdated URL to a research paper with a working URL to the same paper. There is no change to program logic, no security fix, and no vulnerability.

5d051c05by merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#33186: wallet, test: Ancient Wallet Migration from v0.14.3 (no-HD and Single Chain)

This commit only adds new automated tests for migrating very old Bitcoin Core wallets (version 0.14.3 from 2017) to the modern descriptor wallet format. It does not change any wallet production code, consensus rules, or network behavior. T…

757aa573by merge-script+246−124 files
No security note in commit
Low 28 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35925: wallet, rpc: Exclude non-owned addresses from listreceivedby*

This update fixes a wallet reporting bug. When a user asked their Bitcoin wallet to list every address that had received money, including empty ones, the result incorrectly included foreign addresses that the wallet merely knew about (for …

Information disclosure: wallet RPCs leaked existence/labels of foreign addressesIncorrect access-control boundary: non-owned addresses exposed in 'received' reportFix uses IsMine() rather than address purpose metadata, avoiding inconsistent purpose handling
e8cc21c5by Ava Chow+19−32 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35937: test: Append print_suppressions=0 to LSAN_OPTIONS, and suppress bitcoin-qt

This commit only changes test configuration. It tells the LeakSanitizer tool used during automated testing to stop printing long lists of suppressed memory leaks, and it narrows the list of ignored leaks to the bitcoin-qt GUI test binary. …

5973e075by merge-script+3−42 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritytest/refactor: use test deque to avoid quadratic iterationby Lőrinc · 75e6984e · Sep 11, 2025 · 1 fileMessage 100 · StrongInformational 15Details
Commit message · Lőrinc

test/refactor: use test deque to avoid quadratic iteration

Extracted from https://github.com/bitcoin/bitcoin/pull/33141#discussion_r2323012972.
In Python, list `pop(0)` is linear, so consuming all items is quadratic.
Switched to `collections.deque` with `popleft()` to express FIFO intent and avoid the O(n^2) path.
Behavior is unchanged; for a few hundred items the perf impact is likely negligible.

Ref: https://docs.python.org/3/tutorial/datastructures.html#using-lists-as-queues
> While appends and pops from the end of list are fast, doing inserts or pops
> from the beginning of a list is slow (because all of the other elements have
> to be shifted by one).

Co-authored-by: maflcko <6399679+maflcko@users.noreply.github.com>

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This is a minor internal cleanup in Bitcoin Core's Python test runner. It replaces a regular Python list used as a FIFO queue with a purpose-built deque, which avoids a theoretical slowdown when popping items from the front. The change only affects test infrastructure, not the live Bitcoin node software, and the commit message explicitly states behavior is unchanged.

Lower-prioritycommon: Make arith_uint256 trivially copyableby Fabian Jahr · 653a9849 · Sep 11, 2025 · 1 fileMessage 68 · AdequateInformational 18Details
Commit message · Fabian Jahr

common: Make arith_uint256 trivially copyable

Replacing the custom code with default behavior should not result in a change of behavior since base_uint contains a simple array of uint32_t and compiler generated versions of the code could be better optimized.

Co-authored-by: MarcoFalke <*~=`'#}+{/-|&$^_@721217.xyz>

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 18/100

This commit simplifies the internal copy behavior of a core Bitcoin data type (arith_uint256) by letting the compiler generate default copy routines instead of hand-written loops. The change is framed as a performance/cleanup improvement and includes a compile-time check that the type remains trivially copyable. There is no indication this fixes a security bug or introduces a vulnerability.

Lower-priorityci: always use tag for LLVM checkoutby fanquake · b736052e · Sep 11, 2025 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · fanquake

ci: always use tag for LLVM checkout

Rather than trying to match the apt installed clang version, which is
prone to intermittent issues. i.e #33345.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This is a Bitcoin Core continuous integration (CI) script change. It switches the LLVM source checkout from trying to match the locally installed clang version to always using a fixed tag (llvmorg-21.1.1). The commit message says this avoids intermittent CI issues. There is no change to the Bitcoin Core software that users run, no wallet or consensus code is touched, and no security vulnerability is described.

Lower-prioritytest: additional test coverage for script_verify_flagsby Anthony Towns · 652424ad · Sep 11, 2025 · 2 filesMessage 72 · AdequateInformational 14Details
Commit message · Anthony Towns

test: additional test coverage for script_verify_flags

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 14/100

This commit only adds extra test cases and assertions for how Bitcoin Core handles script verification flags. It does not change any production code that processes real transactions, so it cannot introduce a security vulnerability or fix one in live software.

Lower-priorityci: disable cirrus cache in 32bit arm jobby will · 00c253d4 · Sep 10, 2025 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · will

ci: disable cirrus cache in 32bit arm job

Co-authored-by: Max Edwards <youwontforgetthis@gmail.com>
Add an optional matrix field allowing opt-out of configuring cirrus
GHA cache when not using cirrus runners.

This is not needed for the cirruslabs/[save|restore]-cache actions, as
they automatically fallback based on runner type.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit changes Bitcoin Core's continuous integration (CI) configuration for GitHub Actions. It adds a per-job option to override which cache provider is used for Docker setup, specifically setting a 32-bit ARM job to use GitHub Actions' native cache instead of Cirrus Labs' cache. This is a build-infrastructure tweak with no apparent effect on the Bitcoin software users run, on their funds, or on network security.

Lower-priorityci: refactor docker action to return provider strby will · ff18b6bb · Sep 10, 2025 · 2 filesMessage 72 · AdequateInformational 15Details
Commit message · will

ci: refactor docker action to return provider str

Avoid relying on future truthy evaluations of string 'false'.

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This is a routine internal cleanup of Bitcoin Core's GitHub Actions CI configuration. It renames a workflow output from a true/false string ('use-cirrus-runners') to a provider name string ('provider' with values 'gha' or 'cirrus') and updates the action that reads it. The commit message explicitly says it is a refactor to avoid relying on the string 'false' being treated as truthy in future evaluations. There is no change to Bitcoin Core's actual code, consensus rules, wallet handling, networking, or any user-facing behavior.

Lower-prioritytxgraph: use enum Level instead of bool main_onlyby Pieter Wuille · d45f3717 · Sep 10, 2025 · 5 filesMessage 45 · ThinInformational 15Details
Commit message · Pieter Wuille

txgraph: use enum Level instead of bool main_only

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a straightforward code cleanup: it replaces a confusing boolean parameter called main_only with a clearer enum named Level (with values TOP and MAIN) throughout the transaction-graph code. The behavior of the program is unchanged; only the names and call sites are updated to make the code easier to read and maintain.

Lower-prioritylogs: show reindex progress in `ImportBlocks`by Lőrinc · d7de5b10 · Sep 9, 2025 · 1 fileMessage 68 · AdequateInformational 15Details
Commit message · Lőrinc

logs: show reindex progress in `ImportBlocks`

### Summary

When triggering a reindex, users had no indication of how many files remained or how far along the process was.

### Fix

This patch prefetches the target file block file count to be able to show progress information.
Instead of just displaying which block file is being processed, it now indicates how many files remain.

### Reproducer + expected results

Running
```bash
cmake -B build && make -C build -DCMAKE_BUILD_TYPE=Release && ./build/bin/bitcoind -datadir=demo -reindex
```
Shows the block files one-by-one currently, there's no way to see how much work is left:
```
Reindexing block file blk00000.dat...
Loaded 119920 blocks from external file in 1228ms
Reindexing block file blk00001.dat...
Loaded 10671 blocks from external file in 284ms
Reindexing block file blk00002.dat...
Loaded 5459 blocks from external file in 263ms
Reindexing block file blk00003.dat...
Loaded 5595 blocks from external file in 267ms
```

After the change:
```
Reindexing block file blk00000.dat (0% complete)...
Loaded 119920 blocks from external file in 1255ms
Reindexing block file blk00001.dat (1% complete)...
Loaded 10671 blocks from external file in 303ms
Reindexing block file blk00002.dat (2% complete)...
Loaded 5459 blocks from external file in 278ms
Reindexing block file blk00003.dat (3% complete)...
Loaded 5595 blocks from external file in 285ms
```

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a user-experience improvement, not a security fix. It adds a percentage-complete indicator to the log message shown while Bitcoin Core reindexes old block files. Before, users only saw which file was being processed; now they can see roughly how many files remain. There is no change to security-sensitive logic.

Lower-prioritygui: Avoid pathological QT text/markdown behavior...by David Gumberg · 6a371b70 · Sep 9, 2025 · 2 filesMessage 65 · AdequateLow 35Details
Commit message · David Gumberg

gui: Avoid pathological QT text/markdown behavior...

during text selection by only setting plaintext mime data.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Low 35/100

This change alters the Bitcoin Core debug console's text box so that when a user copies selected text, only plain text is placed on the clipboard. Previously, Qt's default behavior could convert the selection into HTML and Markdown formats, which the commit message describes as 'pathological.' The concern is that an attacker who can control text shown in the debug console (for example, error messages or RPC output) might be able to inject malicious content that, if copied and pasted elsewhere, could execute commands or leak data through rich-text features. The patch removes that rich-text conversion entirely.

Lower-priorityci, iwyu: Treat warnings as errors for specific directoriesby Hennadii Stepanov · 02d2b5a1 · Sep 9, 2025 · 1 fileMessage 65 · AdequateInformational 15Details
Commit message · Hennadii Stepanov

ci, iwyu: Treat warnings as errors for specific directories

Currently, this applies only to the `crypto` and `index` directories.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit changes a Bitcoin Core continuous integration (CI) script so that a code-cleanup tool called Include What You Use (IWYU) treats its findings as hard errors for two source directories (`crypto` and `index`), while keeping them as warnings everywhere else. It is a build/development hygiene change, not a fix for a security vulnerability or a change to the Bitcoin protocol or wallet code.

Lower-priorityrefactor: Fix includes in `index` directoryby Hennadii Stepanov · 57a3eac3 · Sep 9, 2025 · 9 filesMessage 57 · ThinInformational 15Details
Commit message · Hennadii Stepanov

refactor: Fix includes in `index` directory

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a routine code cleanup that adjusts which header files are included in the `index` directory of Bitcoin Core. It does not change program behavior, fix a bug, or address a security issue. It simply makes the include lists more precise so the code compiles cleanly with include-what-you-use tooling.

AI review queuedcontrib: add placeholder manpage for bitcoin binaryby fanquake · 53e6db91 · Sep 9, 2025 · 1 fileMessage 30 · OpaqueInformational 15Details
Commit message · fanquake

contrib: add placeholder manpage for bitcoin binary

30/100 · OpaqueMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body! Contains work-in-progress language
Why it was queued
documentation-only discountsecond-pass: opaque commit message
AI analysis · Informational 15/100

This commit adds a placeholder manual page file for the bitcoin binary. It contains only documentation text and instructions for generating real manpages later. There is no executable code, no configuration change, and no security relevance.

Security candidaterefactor: Fix includes in `crypto` directoryby Hennadii Stepanov · bdb8eadc · Sep 9, 2025 · 24 filesMessage 88 · StrongInformational 15Details
Commit message · Hennadii Stepanov

refactor: Fix includes in `crypto` directory

IWYU issue #1763 appears to be a corner case, so it has been addressed
using a local pragma rather than a global mapping.

88/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
cryptography-sensitive path
AI analysis · Informational 15/100

This commit is a routine code cleanup that adjusts which header files are included in the cryptographic source files. It does not change any program logic, algorithms, or security behavior. The goal is to make the include lists match what the compiler actually needs, which helps maintainability and tooling but has no direct security impact.

Lower-priorityci: Do not patch `leveldb` to workaround UB in "tidy" CI jobby Hennadii Stepanov · 56f2a689 · Sep 9, 2025 · 1 fileMessage 62 · AdequateInformational 17Details
Commit message · Hennadii Stepanov

ci: Do not patch `leveldb` to workaround UB in "tidy" CI job

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 17/100

This is a small change to Bitcoin Core's continuous integration (CI) script. It stops applying a temporary code patch to the LevelDB database library during one specific CI job (the 'tidy' job). The patch was a workaround for undefined behavior (reading uninitialized memory) in LevelDB. The tidy job only checks code style and include-usage issues, so it doesn't need the patch. The underlying undefined behavior in LevelDB is not fixed by this commit; it just changes when the workaround is applied.

Lower-prioritycontrib: add bitcoin binary to gen-manpagesby fanquake · f5887a8d · Sep 9, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · fanquake

contrib: add bitcoin binary to gen-manpages

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit simply adds the 'bitcoin' binary to a developer script that automatically generates manual pages. It is a build/maintenance tooling change with no security relevance.

Lower-prioritybuild: bump CLIENT_VERSION_MAJOR to 30by fanquake · 9f744fff · Sep 9, 2025 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · fanquake

build: bump CLIENT_VERSION_MAJOR to 30

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit simply changes the displayed major version number of Bitcoin Core from 29 to 30 in the build configuration. It is a routine development bookkeeping change with no security relevance.

Lower-prioritydoc: remove release note fragmentby fanquake · 0f0e6fe7 · Sep 9, 2025 · 1 fileMessage 68 · AdequateInformational 15Details
Commit message · fanquake

doc: remove release note fragment

I've added the content to
https://github.com/bitcoin-core/bitcoin-devwiki/wiki/v30.0-Release-Notes-Draft.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only deletes a documentation file (a release note fragment). It does not change any code, so it cannot introduce or fix a security bug by itself. The deleted text described an earlier overflow bug in an index feature, but that bug was already addressed in a previous code change referenced by the release note.

Lower-prioritytest: send duplicate blocktxn message in p2p_compactblocks.pyby Eugene Siegel · 8b626476 · Sep 8, 2025 · 1 fileMessage 87 · StrongInformational 15Details
Commit message · Eugene Siegel

test: send duplicate blocktxn message in p2p_compactblocks.py

Add test_multiple_blocktxn_response that checks that the peer is
disconnected.

87/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only adds a new test to Bitcoin Core's test suite. It verifies that a Bitcoin node correctly disconnects a peer that sends an unexpected duplicate 'blocktxn' message after a compact block reconstruction already failed. There is no change to production node code, so this commit does not introduce or fix a live security vulnerability by itself.

AI review queuednet: check for empty header before calling FillBlockby Eugene Siegel · 5e585a0f · Sep 8, 2025 · 1 fileMessage 73 · AdequateLow 44Details
Commit message · Eugene Siegel

net: check for empty header before calling FillBlock

Previously in debug builds, this would cause an Assume crash if
FillBlock had been called previously. This could happen when multiple
blocktxn messages were received.

Co-Authored-By: Greg Sanders <gsanders87@gmail.com>

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
second-pass: broader security terminology
AI analysis · Low 44/100

This change fixes a bug in how Bitcoin Core handles repeated compact-block transaction messages from peers. In debug builds, receiving multiple blocktxn messages for the same block could trigger an internal consistency check (Assume) crash because the code tried to look up information from a header that had already been cleared. The patch detects the empty-header situation, marks the peer as misbehaving, and returns early instead of crashing. It is a robustness fix that prevents a debug-only crash and tightens handling of misbehaving peers.

Security candidateFix benchmark CSV outputby Hennadii Stepanov · 790b4401 · Sep 8, 2025 · 1 fileMessage 51 · ThinInformational 20Details
Commit message · Hennadii Stepanov

Fix benchmark CSV output

The `SHA256AutoDetect` return output is used, among other use cases, to
name benchmarks. Using a comma breaks the CSV output.

This change replaces the comma with a semicolon, which fixes the issue.

51/100 · ThinMessage clarity
✓ Subject identifies a change✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 20/100

This commit fixes a formatting bug in benchmark output. The SHA256AutoDetect function returns a string describing which CPU-accelerated SHA-256 implementations are active. That string previously used commas, which broke CSV-formatted benchmark reports because commas are the field separator. The patch swaps commas for semicolons so benchmark CSV files parse correctly. It is a data-formatting fix, not a security fix.

Lower-priorityguix: strip binaries in libexecby fanquake · 3cceda9f · Sep 8, 2025 · 1 fileMessage 68 · AdequateInformational 19Details
Commit message · fanquake

guix: strip binaries in libexec

31679 moved some internal binaries to libexec/, but the Guix build
wasn't updated to stip these binaries of their debug symbols.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 19/100

This is a build-system fix for Bitcoin Core's Guix reproducible-build process. Some internal helper programs were moved into a 'libexec' folder, but the release build script was still only stripping debug symbols from the 'bin' folder. The patch adds 'libexec' to the list of directories processed so those helper binaries are also split from their debug symbols, keeping release binaries smaller and consistent with the rest of the build.

AI review queuedqt: 30.0 translations updateby Hennadii Stepanov · b320f5ef · Sep 8, 2025 · 123 filesMessage 45 · ThinInformational 15Details
Commit message · Hennadii Stepanov

qt: 30.0 translations update

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
second-pass: unusually broad change
AI analysis · Informational 15/100

This commit is a routine update of the non-English user-interface translations for the Bitcoin Core Qt (graphical) wallet. It adds, removes, and reorders translated text strings and drops a number of very low-translation-coverage locale files. There is no executable code change, no change to wallet logic, networking, consensus, or cryptography, and no security-relevant behavior is introduced or fixed.

AI review queueddoc: move release notes to wiki pre branch offby fanquake · 905c1a77 · Sep 8, 2025 · 24 filesMessage 68 · AdequateInformational 15Details
Commit message · fanquake

doc: move release notes to wiki pre branch off

See
https://github.com/bitcoin-core/bitcoin-devwiki/wiki/v30.0-Release-Notes-Draft.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
Why it was queued
documentation-only discountsecond-pass: unusually broad change
AI analysis · Informational 15/100

This commit only deletes release-note documentation files from the Bitcoin Core repository and moves them to the project's wiki. No program code, configuration defaults, or executable behavior was changed. It is purely a documentation housekeeping step before creating a new release branch.

Lower-prioritynet: Add interrupt to pcp retry loopby TheCharlatan · 188de70c · Sep 8, 2025 · 5 filesMessage 60 · AdequateInformational 19Details
Commit message · TheCharlatan

net: Add interrupt to pcp retry loop

Without this interrupt bitcoind takes a long time to exit if requested
to do so after a failed pcp lookup on startup.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 19/100

This change makes Bitcoin Core shut down faster when a network port-mapping feature (PCP/NAT-PMP) fails during startup. Previously, the retry loop kept waiting for responses even after the user asked the program to quit, causing a long delay. There is no security vulnerability being fixed here—only a responsiveness/usability improvement.

Lower-priorityclang-tidy: Fix critical warningsby Fabian Jahr · c7679748 · Sep 7, 2025 · 2 filesMessage 78 · AdequateInformational 15Details
Commit message · Fabian Jahr

clang-tidy: Fix critical warnings

The std::move in coinstatsindex was not necessary since it was passed as a const reference argument.

The other change in the utxo supply fuzz test changes a line that seems to have triggered a false alarm.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit removes an unnecessary std::move in a database write and adjusts a fuzz test variable to silence a clang-tidy warning. There is no security issue in the diff itself; it is a code-quality cleanup.