BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2902 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

254security candidates607second-pass queue2881AI analyses
193commits · 30 days
489commits · 60 days
1508commits · 180 days
2875commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
939Strong · 80–100
1188Adequate · 60–79
687Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow15750157064
MarcoFalke41021406074
Lőrinc17721177081
fanquake22719226057
Hennadii Stepanov20914208063
rkrux57957074
Sjors Provoost89889074
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Hodlinator66566076
Analysis record

Published AI watches

Last scanned 56 minutes ago

Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable misc-definitions-in-headers

This commit is a code cleanup: it turns on a clang-tidy style check called 'misc-definitions-in-headers' and suppresses that check around a large inline implementation block in a benchmark header. There is no change to Bitcoin's runtime be…

fa93132dby MarcoFalke+3−02 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable clang-tidy rule to reject anon namespace in header

This commit only changes a linting configuration file for the project's code style checker. It enables a rule that prevents anonymous namespaces from being used in header files, which is a code-quality and build-hygiene practice. There is …

No security-relevant signals in the diff or commit message.Change is purely a static-analysis/linting configuration update.
fa5ca877by MarcoFalke+2−11 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Use C++20 std::identity over IntIdentity

This commit is a straightforward code cleanup: it replaces a small custom helper named IntIdentity with the standard C++20 std::identity from the <functional> header. The behavior of the ConvertBits function is unchanged; only the implemen…

fafe5042by MarcoFalke+4−111 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test the result order of a multiple import request is correct

This commit only adds a new automated test to Bitcoin Core. It checks that when a user asks the wallet to import multiple descriptors at once, the list of results comes back in the same order as the original request, including any error me…

3ac8b806by Pol Espinasa+40−01 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test invalid or missing timestamp throws importdescriptors

This commit only adds new automated tests for the Bitcoin Core wallet's importdescriptors RPC. It checks that the command correctly rejects requests with a missing or invalid timestamp. No production wallet code is changed, so this cannot …

No changes to consensus, networking, wallet logic, or cryptographyOnly functional test code is modifiedAdded assertions are for expected error handling paths
e4732bf0by Pol Espinasa+28−11 file
No security note in commit
Informational 15 AI analysisMessage 80 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Remove unused #include in common/system

This is a minor code cleanup that removes one unused header file include and swaps another for a more specific one. It does not change any program behavior or fix any security issue.

fa7304f3by MarcoFalke+1−22 files
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

iwyu: Fix warnings in `src/consensus` and treat them as errors

This commit is a routine code cleanup: it adjusts which C++ header files are included in several consensus-related source files and turns on a stricter compiler hygiene check (Include What You Use, or IWYU) for the src/consensus directory.…

13b53f8bby Hennadii Stepanov+42−79 files
No security note in commit
Informational 15 AI analysisMessage 55 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

fuzz: don't connman.ReceiveMsgFrom oversized msg

This is a small fix to a Bitcoin Core fuzz test (an automated internal testing harness), not to the live network code. The fuzzer was sometimes creating fake P2P messages larger than the real protocol allows and passing them into a test he…

Test-only fuzz harness hardeningOversized message guard added before ReceiveMsgFrom() in fuzz targetNo change to production P2P message acceptance logic
bb19f1daby Greg Sanders+5−01 file
No security note in commit
Informational 15 AI analysisMessage 97 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: Temporarily remove riscv32 config from GHA matrix

This commit simply removes one failing test configuration (RISC-V 32-bit bare metal) from the project's GitHub Actions CI matrix because it was failing. It is a routine CI maintenance change with no security implications.

fa06ea42by MarcoFalke+0−61 file
No security note in commit
Low 47 AI analysisMessage 90 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: verify cross-build SDK archives

This change adds checksum verification to the build system's downloads of Apple, FreeBSD, NetBSD, and OpenBSD software development kits (SDKs). Before this patch, those SDK archives were downloaded at build time and extracted without confi…

Adds cryptographic digest verification for downloaded SDK archivesRemoves unchecked extraction of remote SDK archives in CIHardens CI supply chain for macOS/BSD cross-builds
873550beby Lőrinc+25−126 files
Vendor flagged security relevance
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritytest: Split large init_stress_test into two smaller functionsby MarcoFalke · fab7c7f5 · Jan 14, 2026 · 1 fileMessage 95 · StrongInformational 15Details
Commit message · MarcoFalke

test: Split large init_stress_test into two smaller functions

This refactor can be reviewed with:
--color-moved=dimmed-zebra --color-moved-ws=ignore-all-space

This split makes the code easier to read, modify, and understand.

95/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This is a harmless code cleanup in Bitcoin Core's test suite. A large test function was split into two smaller, easier-to-read functions. No production code or security behavior changed.

Lower-priorityci: Run feature_unsupported_utxo_db.py on Windowsby MarcoFalke · fa5032f0 · Jan 14, 2026 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · MarcoFalke

ci: Run feature_unsupported_utxo_db.py on Windows

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only changes Bitcoin Core's continuous integration (CI) configuration. It adds a Windows CI step to run a specific functional test that was previously excluded because of UTF-8 limitations in an old release. There is no change to Bitcoin Core's actual code, network behavior, or wallet logic, and no security issue is introduced or fixed.

AI review queuedwallet, rpc: Use HandleWalletError in createwalletby Ava Chow · d30ad4a9 · Jan 13, 2026 · 2 filesMessage 65 · AdequateInformational 17Details
Commit message · Ava Chow

wallet, rpc: Use HandleWalletError in createwallet

Use the utility function HandleWalletError to deal with wallet creation
errors in createwallet.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 17/100

This is a small code cleanup in Bitcoin Core's wallet creation RPC. It replaces a local error-handling block with an existing shared helper function, and adds one missing error code (encryption failure) to that helper. There is no direct evidence this fixes a security vulnerability; it is best characterized as a maintainability/refactoring change that incidentally makes error reporting more consistent.

Lower-prioritydoc: fix incorrect description of `PackageMempoolChecks`by ismaelsadeeq · 7fc465ec · Jan 13, 2026 · 1 fileMessage 73 · AdequateInformational 15Details
Commit message · ismaelsadeeq

doc: fix incorrect description of `PackageMempoolChecks`

- We no longer enforce ancestor/descendant count limit
in both PreChecks and PackageMempoolChecks.

- This commit fixes the incorrect comment by just renaming
`PackageMempoolChecks` to `PackageRBFChecks`

- The method name is self explanatory now; hence no need
for a description comment.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a documentation-only change. A developer renamed a function called PackageMempoolChecks to PackageRBFChecks and removed an outdated comment. No actual transaction-validation logic was changed, so this cannot affect security or behavior.

Lower-priorityrefactor: [gui] Use lambdas over std::bindby MarcoFalke · fa019549 · Jan 13, 2026 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · MarcoFalke

refactor: [gui] Use lambdas over std::bind

This refactor makes the code easier to read and maintain.

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This is a straightforward code cleanup in Bitcoin Core's graphical user interface. It replaces older-style std::bind calls with modern C++ lambda functions when connecting internal message-box and question handlers. There is no security-relevant change: the same functions are called with the same arguments, and no behavior changes.

Lower-priorityrefactor: Remove trailing semicolon after ADD_SIGNALS_DECL_WRAPPERby MarcoFalke · eeee1e34 · Jan 13, 2026 · 1 fileMessage 89 · StrongInformational 15Details
Commit message · MarcoFalke

refactor: Remove trailing semicolon after ADD_SIGNALS_DECL_WRAPPER

This is redundant and inconsistent, because call-sites are expected to
add the semicolon, which they all do.

89/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This is a minor code cleanup that removes an extra semicolon inside a macro definition. The macro is used to declare signal-handling functions in Bitcoin Core's user-interface layer. All places that use the macro already add their own semicolon, so the one inside the macro was redundant. There is no security or functional change.

AI review queuedSquashed 'src/ipc/libmultiprocess/' changes from a4f92969649..1fc65008f7dby Ryan Ofsky · 7562e2ae · Jan 13, 2026 · 17 filesMessage 91 · StrongModerate 60Details
Commit message · Ryan Ofsky

Squashed 'src/ipc/libmultiprocess/' changes from a4f92969649..1fc65008f7d

1fc65008f7d Merge bitcoin-core/libmultiprocess#237: Made SpawnProcess() behavior safe post fork()
5205a87cd90 test: check SpawnProcess post-fork safety
69652f0edfa Precompute argv before fork in SpawnProcess
30a8681de62 SpawnProcess: avoid fd leak on close failure
d0fc1081d09 Merge bitcoin-core/libmultiprocess#196: ci: Add NetBSD job
7b171f45bfc Merge bitcoin-core/libmultiprocess#234: doc: Fix typos and grammar in documentation and comments
861da39cae9 ci: Add NetBSD job
458745e3940 Fix various typos, spelling mistakes, and grammatical errors in design.md and source code comments.
585decc8561 Merge bitcoin-core/libmultiprocess#236: ci: Install binary package `capnproto` on OpenBSD instead of building it
14e926a3ff3 refactor: extract MakeArgv helper
1ee909393f4 ci: Install binary package `capnproto` on OpenBSD instead of building it
470fc518d4b Merge bitcoin-core/libmultiprocess#230: cmake: add ONLY_CAPNP target_capnp_sources option
2d8886f26c4 Merge bitcoin-core/libmultiprocess#228: Add versions.md and version.h files describing version branches and tags
c1838be565d Merge bitcoin-core/libmultiprocess#225: Improve and document act support
a173f1704ce Merge bitcoin-core/libmultiprocess#223: ci: Replace nix-shell with equivalent nix develop command
625eaca42fb Merge bitcoin-core/libmultiprocess#229: Design Documentation Update
cc234be73a6 Design doc update
81c652687b8 cmake: add ONLY_CAPNP target_capnp_sources option
6e01d2d766e Add versions.md and version.h files describing version branches and tags
4e3f8fa0d2c doc: add instructions for using act
81712ff6bbf ci: disable KVM and sandbox inside act containers
18a2237a8ef ci: Replace nix-shell with equivalent nix develop command

git-subtree-dir: src/ipc/libmultiprocess
git-subtree-split: 1fc65008f7d64161e84c08cbd93109a23dd6a1e9

91/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Moderate 60/100

This commit updates the libmultiprocess library inside Bitcoin Core. The most important change fixes a classic multi-threaded 'fork safety' bug in the process-spawning code. Before the fix, the code could run a callback inside the child process after fork(), which can cause the child to deadlock forever if the parent happened to be holding a lock at the exact moment of fork. The patch moves that callback work into the parent before fork(), and also makes the child process use simple, non-throwing error handling after fork. Other changes are mostly documentation, CI build setup, and version tracking.

Security candidatepsbt: Fix `PSBTInputSignedAndVerified` bounds `assert`by Lőrinc · 2f5b1c5f · Jan 13, 2026 · 1 fileMessage 81 · StrongLow 45Details
Commit message · Lőrinc

psbt: Fix `PSBTInputSignedAndVerified` bounds `assert`

The previous `assert` used `>=`, allowing `input_index == psbt.inputs.size()` and out-of-bounds access in `psbt.inputs[input_index]`.

Found during review: https://github.com/bitcoin/bitcoin/pull/31650#discussion_r2685892867

81/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
signing boundarysigning or wallet path
AI analysis · Low 45/100

A one-character bug fix in Bitcoin Core's PSBT (Partially Signed Bitcoin Transaction) handling. The code used the wrong comparison in a safety check, so it was possible to request an input index exactly equal to the number of inputs. That would read one element past the end of the list, which can cause a crash or undefined behavior. The fix changes the check so it correctly rejects that out-of-bounds index.

AI review queuedbench: Require semicolon after BENCHMARK(foo)by MarcoFalke · fa3df527 · Jan 13, 2026 · 3 filesMessage 68 · AdequateInformational 15Details
Commit message · MarcoFalke

bench: Require semicolon after BENCHMARK(foo)

This makes the code more consistent.

Also, use "using BenchFunction = ..." while touching the header.

Also, fixup the whitespace after and earlier scripted-diff.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This is a minor code cleanup in Bitcoin Core's internal benchmarking test code. It changes how a macro is written so callers must add a semicolon, and it updates a type alias style. It does not affect the live Bitcoin network, wallets, or consensus rules.

Lower-prioritybench: Remove incorrect __LINE__ in BENCHMARK macroby MarcoFalke · fa8938f0 · Jan 13, 2026 · 2 filesMessage 85 · StrongInformational 15Details
Commit message · MarcoFalke

bench: Remove incorrect __LINE__ in BENCHMARK macro

Duplicate benchmarks with the same name are not supported. Expanding the
name with __LINE__ is confusing and brittle, because it makes duplication
bugs silent.

Fix this twofold:

* By enforcing unique benchmarks at compile-time and link-time. For
example, a link failure may now look like:
"mold: error: duplicate symbol: bench_runner_AddrManAdd"
* By enforcing unique benchmarks at run-time. This should never happen,
due to the build-failure, but a failure may look like:
"Assertion `benchmarks().try_emplace(std::move(name), std::move(func)).second' failed."

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit is a code-quality fix for Bitcoin Core's internal benchmark test harness. It removes a confusing use of line numbers in benchmark names and adds checks to prevent duplicate benchmark names. It does not affect the live Bitcoin network, wallet funds, consensus rules, or node security.

Security candidatescripted-diff: Remove priority_level from BENCHMARK macroby MarcoFalke · fa51a28a · Jan 13, 2026 · 55 filesMessage 83 · StrongInformational 15Details
Commit message · MarcoFalke

scripted-diff: Remove priority_level from BENCHMARK macro

-BEGIN VERIFY SCRIPT-

sed --in-place --regexp-extended 's/BENCHMARK\(([^,]+), benchmark::PriorityLevel::(HIGH|LOW)\)/BENCHMARK(\1)/g' $( git grep -l PriorityLevel )
sed --in-place 's/#define BENCHMARK(n, priority_level)/#define BENCHMARK(n)/g' ./src/bench/bench.h

-END VERIFY SCRIPT-

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
cryptography-sensitive pathseed or entropy pathsigning or wallet path
AI analysis · Informational 15/100

This commit is a cleanup change to Bitcoin Core's internal benchmark test code. It removes an unused 'priority level' argument from the BENCHMARK macro and from all benchmark definitions. The change does not affect the live Bitcoin network, wallet funds, node operations, or any security-sensitive code.

Lower-prioritybench: Remove -priority-level= optionby MarcoFalke · fa790c3e · Jan 13, 2026 · 3 filesMessage 45 · ThinInformational 15Details
Commit message · MarcoFalke

bench: Remove -priority-level= option

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit removes a command-line option called -priority-level from Bitcoin Core's internal benchmark testing tool. It is a code cleanup change affecting only the benchmark test harness, not the live Bitcoin network node software. There is no security relevance.

Lower-prioritygui: Show an error message if the restored wallet name is emptyby Ava Chow · dd904298 · Jan 12, 2026 · 1 fileMessage 73 · AdequateInformational 15Details
Commit message · Ava Chow

gui: Show an error message if the restored wallet name is empty

The Restore Wallet dialog rejects wallet names that are empty, but was
doing so silently. This is confusing, we should be presenting an error
message to the user.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a minor user-interface improvement, not a security fix. The Bitcoin Core wallet restore dialog used to silently do nothing when a user left the wallet name blank. Now it shows a clear error message explaining that the wallet name cannot be empty. There is no vulnerability here.

Lower-priorityrelease note: cpfp carveout removed in 31.0by Greg Sanders · 61726483 · Jan 12, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Greg Sanders

release note: cpfp carveout removed in 31.0

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only adds a release note documenting that a mempool feature called the 'CPFP Carveout' was removed in Bitcoin Core version 31.0. It does not change any code, fix a bug, or address a security vulnerability. It is purely informational documentation for users and developers.

Lower-priorityclusterlin: minimize chunks (feature)by Pieter Wuille · da56ef23 · Jan 12, 2026 · 5 filesMessage 58 · ThinInformational 21Details
Commit message · Pieter Wuille

clusterlin: minimize chunks (feature)

After the normal optimization process finishes, and finds an optimal
spanning forest, run a second process (while computation budget remains)
to split chunks into minimal equal-feerate chunks.

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
AI analysis · Informational 21/100

This commit is a routine feature addition to Bitcoin Core's transaction-cluster linearization code. It adds a second optimization pass that splits large 'chunks' of transactions into smaller pieces that have the same fee rate, while preserving the overall quality of the resulting block template. The change is algorithmic and does not introduce any obvious security vulnerability; it is not a bug fix or a security patch.

AI review queuedtest: add coverage for issue 34206by Greg Sanders · d09a19fd · Jan 12, 2026 · 1 fileMessage 67 · AdequateInformational 12Details
Commit message · Greg Sanders

test: add coverage for issue 34206

67/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 12/100

This commit only adds a new regression test to Bitcoin Core. It does not change any production wallet, consensus, or mempool code. The test exercises a scenario involving v2 and v3 (TRUC) transactions across a blockchain reorganization, likely to ensure a previously reported issue stays fixed. There is no patch to runtime behavior here, so it does not introduce or fix an exploitable vulnerability by itself.

Lower-priorityMake GetBindAddress() callable from outside net.cppby Matthew Zipkin · a0ca851d · Jan 12, 2026 · 3 filesMessage 65 · AdequateInformational 15Details
Commit message · Matthew Zipkin

Make GetBindAddress() callable from outside net.cpp

The function logic is moved-only from net.cpp to netbase.cpp
and redeclared (as non-static) in netbase.h

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit simply moves a small helper function that reads a socket's local address from one source file to another, making it usable by more parts of the program. The actual code behavior is unchanged; it is a routine refactoring, not a security fix or vulnerability.

Lower-priorityvalidation: make `IsInitialBlockDownload()` lock-freeby Lőrinc · 557b41a3 · Jan 12, 2026 · 5 filesMessage 83 · StrongInformational 14Details
Commit message · Lőrinc

validation: make `IsInitialBlockDownload()` lock-free

`ChainstateManager::IsInitialBlockDownload()` is queried on hot paths and previously acquired `cs_main` internally, contributing to lock contention.

Cache the IBD status in `m_cached_is_ibd`, and introduce `ChainstateManager::UpdateIBDStatus()` to latch it once block loading has finished and the current chain tip has enough work and is recent.
Call the updater after tip updates and after `ImportBlocks()` completes.

Since `IsInitialBlockDownload()` no longer updates the cache, drop `mutable` from `m_cached_is_ibd` and only update it from `UpdateIBDStatus()` under `cs_main`.

Update the new unit test to showcase the new `UpdateIBDStatus()`.

Co-authored-by: Patrick Strateman <patrick.strateman@gmail.com>
Co-authored-by: Martin Zumsande <mzumsande@gmail.com>

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 14/100

This commit is a performance optimization, not a security fix. It changes how Bitcoin Core decides whether it is still downloading the historical blockchain (Initial Block Download, or IBD). Previously, every check for IBD status had to grab a global lock, which could slow down busy code paths. Now the status is cached in an atomic variable and only updated at specific safe points. There is no evidence in the commit or supplied references that this fixes a vulnerability or is being exploited.

Lower-prioritychain: add `CChain::IsTipRecent` helperby Lőrinc · b9c0ab3b · Jan 12, 2026 · 3 filesMessage 68 · AdequateInformational 15Details
Commit message · Lőrinc

chain: add `CChain::IsTipRecent` helper

Factor the chain tip work/recency check out of `ChainstateManager::IsInitialBlockDownload()` into a reusable `CChain::IsTipRecent()` helper, and annotate it as requiring `cs_main` since it's reading mutable state.

Also introduce a local `chainman_ref` in the kernel import-blocks wrapper to reduce repetition and keep follow-up diffs small.

`IsInitialBlockDownload` returns were also unified to make the followup move clean.

Co-authored-by: Patrick Strateman <patrick.strateman@gmail.com>
Co-authored-by: Martin Zumsande <mzumsande@gmail.com>

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a routine code cleanup in Bitcoin Core. It pulls out a small, existing check ('is the chain tip recent enough?') from one function into a reusable helper, and slightly tidies a nearby block-import wrapper. There is no security-relevant behavior change.

Lower-priorityvalidation: invert `m_cached_finished_ibd` to `m_cached_is_ibd`by Lőrinc · 8d531c62 · Jan 12, 2026 · 5 filesMessage 85 · StrongInformational 15Details
Commit message · Lőrinc

validation: invert `m_cached_finished_ibd` to `m_cached_is_ibd`

Rename and invert the internal IBD latch so the cached value directly matches `IsInitialBlockDownload()` (true while in IBD, then latched to false).

This is a behavior-preserving refactor to avoid double negatives.

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit is a simple rename and logic inversion inside Bitcoin Core. It changes an internal cached flag from 'finished IBD' to 'is IBD' so the code avoids double negatives. The actual behavior of the program is unchanged.

Lower-prioritytest: cover IBD exit conditionsby Lőrinc · 8be54e3b · Jan 12, 2026 · 1 fileMessage 90 · StrongInformational 15Details
Commit message · Lőrinc

test: cover IBD exit conditions

Add a unit test that exercises the `IsInitialBlockDownload()` decision matrix by varying the cached latch, `BlockManager::LoadingBlocks()`, and tip work/recency inputs.

This documents the current latching behavior and provides a baseline for later refactors.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only adds a new unit test and fixes a couple of comment typos. It does not change any production code, so it cannot introduce a security vulnerability or fix one directly. The test documents when Bitcoin Core considers itself to have finished Initial Block Download (IBD).

Security candidatepsbt: validate pubkeys in MuSig2 pubnonce/partial sig deserializationby tboy1337 · f51665be · Jan 12, 2026 · 2 filesMessage 100 · StrongModerate 60Details
Commit message · tboy1337

psbt: validate pubkeys in MuSig2 pubnonce/partial sig deserialization

Add validation for pubkeys in MuSig2 pubnonce and partial signature deserialization to prevent crashes with invalid curve points.

- Validate aggregate and participant pubkeys in PSBT MuSig2 fields

- Add comprehensive test coverage for invalid pubkey rejection

- Ensure proper error handling during PSBT deserialization

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification✓ Names security-relevant behavior explicitly
Why it was queued
signing boundarydefensive validationsigning or wallet path
AI analysis · Moderate 60/100

This commit fixes a bug in Bitcoin Core's handling of partially signed Bitcoin transactions (PSBTs) that use the MuSig2 multi-signature scheme. Previously, when reading certain MuSig2 fields, the code accepted invalid public keys (points that are not valid on the Bitcoin elliptic curve). The fix adds checks that reject these invalid keys during deserialization, turning potential crashes or undefined behavior into clean error messages. The commit also adds test cases with deliberately bad keys to confirm they are rejected.

AI review queuedcontrib: Remove unused functionsby MarcoFalke · facaf562 · Jan 12, 2026 · 2 filesMessage 35 · OpaqueInformational 15Details
Commit message · MarcoFalke

contrib: Remove unused functions

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit simply deletes unused helper code from two Python scripts in the contrib/ directory. No security vulnerability is introduced or fixed; it is a routine cleanup change.

Lower-prioritycoins: assume `GetCoin` only returns unspent coinsby Andrew Toth · 2ee7f9b2 · Jan 11, 2026 · 2 filesMessage 85 · StrongInformational 22Details
Commit message · Andrew Toth

coins: assume `GetCoin` only returns unspent coins

`CCoinsViewCache::FetchCoin()` had special handling for a spent `Coin` returned by the parent view.
Production parents (`CCoinsViewCache` and `CCoinsViewDB`) do not return spent coins, so this path is unreachable.

Replace it with an `Assume(!coin.IsSpent())`, drop outdated documentation about spent+FRESH cache entries, and simplify `SanityCheck()` to assert the remaining possible state invariants.
This is safe because it does not change behavior for valid backends and will fail fast if the `GetCoin()` contract is violated.

Co-authored-by: Lőrinc <pap.lorinc@gmail.com>

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 22/100

This commit tightens an internal assumption in Bitcoin Core's coin cache. It removes a special code path that handled the theoretical case where a parent view returns a spent coin, replacing it with a hard assertion that this never happens. It also simplifies related bookkeeping and sanity checks. The change is defensive cleanup rather than a fix for a known exploitable bug.

Lower-prioritydoc: add 433 (Pay to Anchor) to bips.mdby Sebastian Falbesoner · 44b12cdb · Jan 11, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Sebastian Falbesoner

doc: add 433 (Pay to Anchor) to bips.md

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only updates a documentation file (doc/bips.md) to list that Bitcoin Core supports BIP 433 (Pay to Anchor) as of version 28.0. It does not change any executable code, network rules, or wallet behavior. There is no security issue here.