BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2900 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

254security candidates607second-pass queue2881AI analyses
209commits · 30 days
502commits · 60 days
1535commits · 180 days
2884commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
937Strong · 80–100
1188Adequate · 60–79
687Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow15750157064
MarcoFalke41021406074
Lőrinc17721177081
fanquake22719226057
Hennadii Stepanov20914208063
rkrux57957074
Sjors Provoost89889074
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Hodlinator66566076
Analysis record

Published AI watches

Last scanned 55 minutes ago

Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable misc-definitions-in-headers

This commit is a code cleanup: it turns on a clang-tidy style check called 'misc-definitions-in-headers' and suppresses that check around a large inline implementation block in a benchmark header. There is no change to Bitcoin's runtime be…

fa93132dby MarcoFalke+3−02 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable clang-tidy rule to reject anon namespace in header

This commit only changes a linting configuration file for the project's code style checker. It enables a rule that prevents anonymous namespaces from being used in header files, which is a code-quality and build-hygiene practice. There is …

No security-relevant signals in the diff or commit message.Change is purely a static-analysis/linting configuration update.
fa5ca877by MarcoFalke+2−11 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Use C++20 std::identity over IntIdentity

This commit is a straightforward code cleanup: it replaces a small custom helper named IntIdentity with the standard C++20 std::identity from the <functional> header. The behavior of the ConvertBits function is unchanged; only the implemen…

fafe5042by MarcoFalke+4−111 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test the result order of a multiple import request is correct

This commit only adds a new automated test to Bitcoin Core. It checks that when a user asks the wallet to import multiple descriptors at once, the list of results comes back in the same order as the original request, including any error me…

3ac8b806by Pol Espinasa+40−01 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test invalid or missing timestamp throws importdescriptors

This commit only adds new automated tests for the Bitcoin Core wallet's importdescriptors RPC. It checks that the command correctly rejects requests with a missing or invalid timestamp. No production wallet code is changed, so this cannot …

No changes to consensus, networking, wallet logic, or cryptographyOnly functional test code is modifiedAdded assertions are for expected error handling paths
e4732bf0by Pol Espinasa+28−11 file
No security note in commit
Informational 15 AI analysisMessage 80 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Remove unused #include in common/system

This is a minor code cleanup that removes one unused header file include and swaps another for a more specific one. It does not change any program behavior or fix any security issue.

fa7304f3by MarcoFalke+1−22 files
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

iwyu: Fix warnings in `src/consensus` and treat them as errors

This commit is a routine code cleanup: it adjusts which C++ header files are included in several consensus-related source files and turns on a stricter compiler hygiene check (Include What You Use, or IWYU) for the src/consensus directory.…

13b53f8bby Hennadii Stepanov+42−79 files
No security note in commit
Informational 15 AI analysisMessage 55 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

fuzz: don't connman.ReceiveMsgFrom oversized msg

This is a small fix to a Bitcoin Core fuzz test (an automated internal testing harness), not to the live network code. The fuzzer was sometimes creating fake P2P messages larger than the real protocol allows and passing them into a test he…

Test-only fuzz harness hardeningOversized message guard added before ReceiveMsgFrom() in fuzz targetNo change to production P2P message acceptance logic
bb19f1daby Greg Sanders+5−01 file
No security note in commit
Informational 15 AI analysisMessage 97 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: Temporarily remove riscv32 config from GHA matrix

This commit simply removes one failing test configuration (RISC-V 32-bit bare metal) from the project's GitHub Actions CI matrix because it was failing. It is a routine CI maintenance change with no security implications.

fa06ea42by MarcoFalke+0−61 file
No security note in commit
Low 47 AI analysisMessage 90 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: verify cross-build SDK archives

This change adds checksum verification to the build system's downloads of Apple, FreeBSD, NetBSD, and OpenBSD software development kits (SDKs). Before this patch, those SDK archives were downloaded at build time and extracted without confi…

Adds cryptographic digest verification for downloaded SDK archivesRemoves unchecked extraction of remote SDK archives in CIHardens CI supply chain for macOS/BSD cross-builds
873550beby Lőrinc+25−126 files
Vendor flagged security relevance
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritytest: Add missing txospenderindex coverage in feature_initby Fabian Jahr · f8b9595a · Mar 5, 2026 · 1 fileMessage 95 · StrongInformational 15Details
Commit message · Fabian Jahr

test: Add missing txospenderindex coverage in feature_init

Also refactors the list of all index args into a constant that can be reused across tests.

Co-authored-by: sedited <seb.kung@gmail.com>

95/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This is a routine test-only change for Bitcoin Core. It adds the new '-txospenderindex' option to an existing initialization test and refactors the list of index arguments into a shared constant. There is no change to production code, no security fix, and no vulnerability.

Lower-prioritytest: sock: Enable socket pair tests on Windowsby David Gumberg · 9316d962 · Mar 5, 2026 · 1 fileMessage 90 · StrongInformational 15Details
Commit message · David Gumberg

test: sock: Enable socket pair tests on Windows

Adds a helper struct `socket_pair` for constructing and connecting TCP
sockets, this replaces socketpair() which is not available on Windows.
Making the socket pair TCP sockets instead of Unix sockets, and
separating socket creation from socket connection also enables more
detailed tests to be added in the future.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only changes test code. It replaces Unix-only socketpair() with a cross-platform TCP loopback socket helper so the same socket tests can run on Windows. There is no change to production Bitcoin Core networking code, consensus logic, or wallet handling, so it does not affect live node security.

Lower-prioritytest: Wait for txospender index to be synced in rpc_gettxspendingprevoutby Ava Chow · cbdb891d · Mar 5, 2026 · 1 fileMessage 87 · StrongInformational 15Details
Commit message · Ava Chow

test: Wait for txospender index to be synced in rpc_gettxspendingprevout

Each node's txospender index needs to catch up with the existing chain
before the tests will work.

87/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Mentions testing or verification
AI analysis · Informational 15/100

This is a test-only change. It adds two lines to a single functional test file to wait for an internal index to finish syncing before continuing the test. There is no change to production Bitcoin Core code, no wallet or consensus logic is touched, and no security vulnerability is present in the commit.

Lower-prioritytest: Sync mempools after tx creation in rpc_gettxspendingprevoutby Ava Chow · 2db5c049 · Mar 5, 2026 · 1 fileMessage 95 · StrongInformational 15Details
Commit message · Ava Chow

test: Sync mempools after tx creation in rpc_gettxspendingprevout

The test will query information from the other nodes about mempool txs,
ensure that the txs are in their mempools beforehand.

95/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This is a one-line change to a Bitcoin Core functional test. It adds a mempool synchronization step before the test checks that transactions are visible across nodes. It does not change production code, consensus rules, networking, or wallet behavior, and it does not fix a security issue in the Bitcoin software itself.

Lower-prioritycontrib: Add bash completion for new bitcoin commandby CaesarCoder · 39668f1e · Mar 5, 2026 · 1 fileMessage 73 · AdequateInformational 16Details
Commit message · CaesarCoder

contrib: Add bash completion for new bitcoin command

Adds a bash completion script for the new bitcoin command-line
tool, which unifies the main Bitcoin Core executables under a
single interface. This feature improves usability, reduces errors,
and makes the command-line tools more easily discoverable for users
working in a Linux bash environment.

The completion script dynamically lists available commands and options
by parsing `bitcoin --help` and `bitcoin help`. It also incorporates
the existing bash completions for `bitcoind`, `bitcoin-cli`, and
`bitcoin-tx`, depending on the argument provided (node, rpc, or tx).
This ensures that all relevant completions are available seamlessly
through a single interface without modifying core functionality.

No functional changes to core code are introduced; this is an optional
enhancement placed under `contrib/` for easy installation and use.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 16/100

This commit adds a new bash tab-completion helper script for a new 'bitcoin' command-line wrapper tool. It only lives in the contrib/ directory (optional add-on files) and does not change any Bitcoin Core wallet, networking, or consensus code. There is no security issue visible in the change.

Security candidatefuzz: set whitelist permissions on connman targetby Bruno Garcia · 32debfa1 · Mar 5, 2026 · 1 fileMessage 55 · ThinInformational 15Details
Commit message · Bruno Garcia

fuzz: set whitelist permissions on connman target

55/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
fuzzing or regression evidencecredential or privilege state
AI analysis · Informational 15/100

This commit adds fuzz-testing coverage for whitelist permission settings inside a test harness. It does not change production network code, user-facing behavior, or fix a live vulnerability. It is a test-quality improvement that helps automated fuzzers explore more code paths in CConnman initialization.

Lower-priorityindex, rpc, test: Misc formatting fixesby Fabian Jahr · a1074d85 · Mar 5, 2026 · 3 filesMessage 55 · ThinInformational 15Details
Commit message · Fabian Jahr

index, rpc, test: Misc formatting fixes

55/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit contains only cosmetic formatting fixes: removing a blank line at the top of a header file, deleting an accidental backslash at the end of a C++ source line, and adding a trailing comma in a Python test dictionary. None of these changes affect program behavior or security.

Lower-priorityhelp: enrich help text for `-loadblock`by Hao Xu · 2e041b49 · Mar 5, 2026 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · Hao Xu

help: enrich help text for `-loadblock`

`-loadblock` doesn't support obfuscated blocks, mention it in its help text
to avoid troubles for users.

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit only changes the user-facing help text for the `-loadblock` command-line option. It adds a note that the option cannot read obfuscated (scrambled) block files. There is no code behavior change, no bug fix, and no security-relevant change.

Lower-priorityvalidation: remove ConnectTrace wrapper classby stickies-v · 2f8f2e90 · Mar 5, 2026 · 2 filesMessage 68 · AdequateInformational 15Details
Commit message · stickies-v

validation: remove ConnectTrace wrapper class

Replace ConnectTrace with a plain std::vector<ConnectedBlock>, and
rename PerBlockConnectTrace to ConnectedBlock and connectTrace to
connected_blocks.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a simple internal code cleanup in Bitcoin Core. It removes a small wrapper class called ConnectTrace and replaces it with a plain list (std::vector) of connected blocks, renaming some variables for clarity. There is no change to network rules, transaction validation, wallet behavior, or any user-facing feature. It does not fix a bug or introduce a known security issue.

Lower-priorityExtend functional test for setBlockIndexCandidates UBby marcofleon · 20ae9b98 · Mar 4, 2026 · 1 fileMessage 83 · StrongLow 33Details
Commit message · marcofleon

Extend functional test for setBlockIndexCandidates UB

Fix the from-disk subtest to use a separate node so it builds on a
clean genesis block, rather than the leftover chain from the
in-memory subtest.

Change from a two-way to a three-way block race. The UB in the old
LoadChainTip (mutating nSequenceId, a sort key, while the block is
in setBlockIndexCandidates) corrupts the internal tree structure,
resulting in a failed erase that leaves stale blocks in the set
alongside the tip. With only two competing blocks, this is caught
by libstdc++ but not by libc++. A three-way split triggers the bug
on both implementations.

To trigger CheckBlockIndex (where the crashing assertion is), replace
the restart loop with sending a new block after a single restart.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Low 33/100

This commit only changes a test file. It improves an existing functional test that exercises a known undefined-behavior bug in Bitcoin Core's block index handling. The test now uses a separate node, creates a three-way block race instead of a two-way race, and triggers the bug more reliably across different C++ standard library implementations. It does not change production code, so it does not fix or introduce a vulnerability by itself.

Lower-priorityvalidation: fix UB in LoadChainTipby marcofleon · 854a6d5a · Mar 4, 2026 · 5 filesMessage 68 · AdequateModerate 57Details
Commit message · marcofleon

validation: fix UB in LoadChainTip

The removal of the chain tip from setBlockIndexCandidates was
happening after nSequenceId was modified. Since the set uses
nSequenceId as a sort key, modifying it while the element is in the
set is undefined behavior, which can cause the erase to fail.

With assumeutxo, a second form of UB exists: two chainstates each
have their own candidate set, but share the same CBlockIndex
objects. Calling LoadChainTip on one chainstate mutates nSequenceIds
that are also in the other chainstate's set.

Fix by populating setBlockIndexCandidates after all changes to
nSequenceId.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Moderate 57/100

This commit fixes a low-level memory-handling bug in Bitcoin Core's startup code. When loading the chain tip, the program was changing a value (nSequenceId) that is also used to sort a set of candidate blocks, while the block was still in that set. In C++, changing a sort key while an item is in a sorted set is 'undefined behavior'—the program may crash, corrupt data, or behave unpredictably. The fix moves the population of the candidate set to after all such changes are complete. A second, related problem existed with the experimental assumeutxo feature, where two separate chain states share the same block objects and could interfere with each other's candidate sets. The patch addresses both by clearing and repopulating candidate sets at safe points.

Lower-prioritytest: Fix shutdown vptr race in BlockFilterIndexSync benchby MarcoFalke · fa79098c · Mar 4, 2026 · 4 filesMessage 72 · AdequateInformational 18Details
Commit message · MarcoFalke

test: Fix shutdown vptr race in BlockFilterIndexSync bench

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 18/100

This commit fixes a test-only race condition during shutdown of benchmark and unit tests that use Bitcoin Core's index objects. It adds a missing Stop() call in one benchmark and removes unnecessary synchronization comments/calls in several tests. The issue is not exploitable by users or network attackers; it only affects internal test code and could cause flaky or incorrect test results, including a potential virtual-pointer (vptr) race during benchmark teardown.

Lower-priorityvalidation: remove LoadChainTip call from ActivateSnapshotby marcofleon · 9249e608 · Mar 4, 2026 · 1 fileMessage 73 · AdequateInformational 13Details
Commit message · marcofleon

validation: remove LoadChainTip call from ActivateSnapshot

This call is a no-op. PopulateAndValidateSnapshot already sets both
the chain tip and the coins cache best block to the snapshot block,
so LoadChainTip always hits the early return when it finds that the
two match (tip->GetBlockHash() == coins_cache.GetBestBlock()).

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
defensive validation
AI analysis · Informational 13/100

This commit removes a redundant function call and its assertion from the snapshot activation code in Bitcoin Core. The commit message explains the call was doing nothing useful because an earlier step already set the same state. There is no security-relevant change visible in the diff or commit message.

Security candidatefuzz: make sure PSBT serialization roundtripsby Antoine Poinsot · d76ec4de · Mar 4, 2026 · 1 fileMessage 70 · AdequateLow 29Details
Commit message · Antoine Poinsot

fuzz: make sure PSBT serialization roundtrips

This will prevent us from creating a serialization we do not accept
going forward.

70/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Mentions testing or verification
Why it was queued
signing boundaryfuzzing or regression evidencesigning or wallet path
AI analysis · Low 29/100

This commit adds a new fuzz test to Bitcoin Core that checks whether PSBT (Partially Signed Bitcoin Transaction) data can be serialized and then deserialized back to the exact same bytes. It is a defensive test meant to catch future bugs where the software might write a PSBT format it cannot later read. The commit itself does not fix any active vulnerability; it adds a regression test.

AI review queuedtest: Fix intermittent issue in wallet_assumeutxo.pyby MarcoFalke · faa68ed4 · Mar 4, 2026 · 2 filesMessage 72 · AdequateInformational 15Details
Commit message · MarcoFalke

test: Fix intermittent issue in wallet_assumeutxo.py

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit fixes a flaky automated test in Bitcoin Core. It replaces a complicated node restart/sync dance with a simpler helper that manually copies blocks between test nodes via RPC. There is no change to production code, no security fix, and no vulnerability.

Lower-prioritysubprocess: replace __USING_WINDOWS__ with WIN32by kevkevinpal · bff8a7a8 · Mar 4, 2026 · 1 fileMessage 45 · ThinInformational 18Details
Commit message · kevkevinpal

subprocess: replace __USING_WINDOWS__ with WIN32

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 18/100

This commit swaps the internal macro used to detect Windows builds in a third-party subprocess helper header. Previously the code checked for Microsoft Visual C++ or MinGW compilers to decide 'this is Windows'; now it uses the standard WIN32 macro. There is no change to actual program logic, only to the condition that selects Windows-specific versus Unix-specific code paths. It is a portability/build cleanup, not a security fix.

Lower-prioritykernel: Use fs:: namespace and unicode path in kernel testsby sedited · 89386e70 · Mar 4, 2026 · 5 filesMessage 83 · StrongInformational 19Details
Commit message · sedited

kernel: Use fs:: namespace and unicode path in kernel tests

Add support for unicode characters in paths to the kernel tests by using
our fs:: wrappers for std::filesystem calls and adding the windows
application manifest to the binary. This exercises their handling
through the kernel API.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 19/100

This commit updates Bitcoin Core's kernel test suite to use the project's own filesystem helpers and to include a Windows application manifest. It also makes the temporary test directories contain a corn emoji (🌽) to exercise Unicode path handling. The changes are test-only and defensive: they improve test coverage for non-ASCII paths on Windows, but do not fix a live vulnerability in production code.

AI review queuedprevector: simplify `operator==`by Daniel Pfeifer · 2678abe9 · Mar 4, 2026 · 1 fileMessage 35 · OpaqueInformational 15Details
Commit message · Daniel Pfeifer

prevector: simplify `operator==`

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit is a small code cleanup in Bitcoin Core. It replaces a hand-written equality check for a custom vector-like container (`prevector`) with a standard C++ library function (`std::ranges::equal`). There is no security-relevant change visible in the diff, and no security context is provided by the commit or any supplied references.

Lower-prioritydoc: Update Windows build notesby Hennadii Stepanov · 0a6724aa · Mar 4, 2026 · 1 fileMessage 76 · AdequateInformational 15Details
Commit message · Hennadii Stepanov

doc: Update Windows build notes

Cross-compiling Qt 6.8 for Windows requires GCC 13.1 or newer, which
exceeds the currently documented minimum.
See https://doc.qt.io/qt-6.8/windows.html.

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This is a documentation-only update to the Windows build instructions. It simply notes that compiling the graphical user interface (GUI) for Windows now requires GCC version 13 or newer. There is no code change, no bug fix, and no security issue.

Lower-priorityqt: Add patch to fix SFINAE warnings in QAnyStringView with gcc16by Hennadii Stepanov · 473e5f8e · Mar 4, 2026 · 2 filesMessage 50 · ThinInformational 14Details
Commit message · Hennadii Stepanov

qt: Add patch to fix SFINAE warnings in QAnyStringView with gcc16

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 14/100

This commit adds a build-system patch for the Qt library used by Bitcoin Core. The patch moves two compile-time type checks (static_asserts) from inside a C++ class definition to outside it, because a newer GCC 16 compiler flag reports that the checks were placed where they could give misleading errors during template selection (SFINAE warnings). It is a build/toolchain compatibility fix, not a change to Bitcoin Core's consensus, networking, wallet, or node logic.

Lower-priorityqt: add patches to fix SFINAE errors/warnings with gcc16by Cory Fields · 3cb4d606 · Mar 4, 2026 · 5 filesMessage 81 · StrongInformational 21Details
Commit message · Cory Fields

qt: add patches to fix SFINAE errors/warnings with gcc16

Meta-Issue: https://qt-project.atlassian.net/browse/QTBUG-143470
Backports:

https://github.com/qt/qtbase/commit/679e8bda1eb0cc98acb981e9a10204bed1c179f2
https://github.com/qt/qtbase/commit/3312e89b47f8c2ea0b4263b39841c25b83a37332
https://github.com/qt/qtbase/commit/05f201a3d559452287b20becb960de3a50249540

An additional includes fix is needed after the others:
https://github.com/qt/qtbase/commit/d68fc6ecc88a0e4532754b1a9f209881a248f4ee

81/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 21/100

This commit adds four build-compatibility patches to the Qt source code that Bitcoin Core downloads and compiles. The patches fix C++ template/header ordering problems that cause errors or warnings when building with the upcoming GCC 16 compiler. These are compile-time hygiene fixes, not security bug fixes, and they do not change how Bitcoin Core behaves at runtime.

Lower-priorityqt: add patch to fix build with gcc16by Cory Fields · d7e972a9 · Mar 4, 2026 · 2 filesMessage 68 · AdequateInformational 21Details
Commit message · Cory Fields

qt: add patch to fix build with gcc16

Backported from:
https://github.com/qt/qtbase/commit/7fccc79dd5744ea837ffe200bbfc9f2756870220

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 21/100

This commit adds a build-system patch so Bitcoin Core's bundled Qt dependency can compile with the upcoming GCC 16 compiler. It is a backport of an upstream Qt fix that handles a change in how GCC 16 represents certain C++ comparison values internally. There is no indication this fixes a security vulnerability; it is purely a compatibility/build fix.

Lower-prioritydepends: Update Qt to 6.8.3by Hennadii Stepanov · 19693a8c · Mar 4, 2026 · 9 filesMessage 45 · ThinLow 25Details
Commit message · Hennadii Stepanov

depends: Update Qt to 6.8.3

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Low 25/100

This commit updates the Qt graphical toolkit used by Bitcoin Core from version 6.7.3 to 6.8.3. It changes download URLs, checksums, build settings, and patches. The update itself is a routine dependency refresh, but any Qt upgrade can introduce or fix security issues in the user interface code. The commit does not mention any specific security problem, and the visible changes are mostly build-compatibility and reproducibility adjustments rather than obvious vulnerability fixes.

Lower-prioritycmake: Fix `FindQt` moduleby Hennadii Stepanov · c5558457 · Mar 4, 2026 · 1 fileMessage 50 · ThinInformational 17Details
Commit message · Hennadii Stepanov

cmake: Fix `FindQt` module

The `find_package(Qt .. MODULE REQUIRED COMPONENTS ...)` call must treat
any missing component as a fatal error.

50/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides an explanatory body
AI analysis · Informational 17/100

This is a one-line fix to a CMake build script that looks for the Qt GUI library. Previously, the build could proceed even if a required Qt component was missing, because the script only checked that Qt's main directory was set. Now it also checks that Qt was actually found. This prevents silent misconfiguration of the build, but it is a build-time correctness issue rather than a runtime vulnerability in Bitcoin Core itself.

Lower-priorityci: use Clang 22 in tidy taskby fanquake · 4089682f · Mar 3, 2026 · 2 filesMessage 84 · StrongInformational 15Details
Commit message · fanquake

ci: use Clang 22 in tidy task

Added -config-file as otherwise run-clang-tidy no-longer seemed able to
find the config file.

84/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit updates the Bitcoin Core continuous integration (CI) system to use Clang 22 instead of Clang 21 for the clang-tidy static analysis task. It also adds an explicit path to the clang-tidy configuration file because the newer version no longer finds it automatically. This is a build/test infrastructure change with no effect on the Bitcoin Core software that users run.