BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2902 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

254security candidates607second-pass queue2881AI analyses
192commits · 30 days
486commits · 60 days
1504commits · 180 days
2875commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
939Strong · 80–100
1188Adequate · 60–79
687Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow15750157064
MarcoFalke41021406074
Lőrinc17721177081
fanquake22719226057
Hennadii Stepanov20914208063
rkrux57957074
Sjors Provoost89889074
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Hodlinator66566076
Analysis record

Published AI watches

Last scanned 11 minutes ago

Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable misc-definitions-in-headers

This commit is a code cleanup: it turns on a clang-tidy style check called 'misc-definitions-in-headers' and suppresses that check around a large inline implementation block in a benchmark header. There is no change to Bitcoin's runtime be…

fa93132dby MarcoFalke+3−02 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable clang-tidy rule to reject anon namespace in header

This commit only changes a linting configuration file for the project's code style checker. It enables a rule that prevents anonymous namespaces from being used in header files, which is a code-quality and build-hygiene practice. There is …

No security-relevant signals in the diff or commit message.Change is purely a static-analysis/linting configuration update.
fa5ca877by MarcoFalke+2−11 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Use C++20 std::identity over IntIdentity

This commit is a straightforward code cleanup: it replaces a small custom helper named IntIdentity with the standard C++20 std::identity from the <functional> header. The behavior of the ConvertBits function is unchanged; only the implemen…

fafe5042by MarcoFalke+4−111 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test the result order of a multiple import request is correct

This commit only adds a new automated test to Bitcoin Core. It checks that when a user asks the wallet to import multiple descriptors at once, the list of results comes back in the same order as the original request, including any error me…

3ac8b806by Pol Espinasa+40−01 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test invalid or missing timestamp throws importdescriptors

This commit only adds new automated tests for the Bitcoin Core wallet's importdescriptors RPC. It checks that the command correctly rejects requests with a missing or invalid timestamp. No production wallet code is changed, so this cannot …

No changes to consensus, networking, wallet logic, or cryptographyOnly functional test code is modifiedAdded assertions are for expected error handling paths
e4732bf0by Pol Espinasa+28−11 file
No security note in commit
Informational 15 AI analysisMessage 80 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Remove unused #include in common/system

This is a minor code cleanup that removes one unused header file include and swaps another for a more specific one. It does not change any program behavior or fix any security issue.

fa7304f3by MarcoFalke+1−22 files
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

iwyu: Fix warnings in `src/consensus` and treat them as errors

This commit is a routine code cleanup: it adjusts which C++ header files are included in several consensus-related source files and turns on a stricter compiler hygiene check (Include What You Use, or IWYU) for the src/consensus directory.…

13b53f8bby Hennadii Stepanov+42−79 files
No security note in commit
Informational 15 AI analysisMessage 55 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

fuzz: don't connman.ReceiveMsgFrom oversized msg

This is a small fix to a Bitcoin Core fuzz test (an automated internal testing harness), not to the live network code. The fuzzer was sometimes creating fake P2P messages larger than the real protocol allows and passing them into a test he…

Test-only fuzz harness hardeningOversized message guard added before ReceiveMsgFrom() in fuzz targetNo change to production P2P message acceptance logic
bb19f1daby Greg Sanders+5−01 file
No security note in commit
Informational 15 AI analysisMessage 97 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: Temporarily remove riscv32 config from GHA matrix

This commit simply removes one failing test configuration (RISC-V 32-bit bare metal) from the project's GitHub Actions CI matrix because it was failing. It is a routine CI maintenance change with no security implications.

fa06ea42by MarcoFalke+0−61 file
No security note in commit
Low 47 AI analysisMessage 90 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: verify cross-build SDK archives

This change adds checksum verification to the build system's downloads of Apple, FreeBSD, NetBSD, and OpenBSD software development kits (SDKs). Before this patch, those SDK archives were downloaded at build time and extracted without confi…

Adds cryptographic digest verification for downloaded SDK archivesRemoves unchecked extraction of remote SDK archives in CIHardens CI supply chain for macOS/BSD cross-builds
873550beby Lőrinc+25−126 files
Vendor flagged security relevance
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-priorityiwyu: Add patch to prefer C++ headers over C counterpartsby Hennadii Stepanov · 73f7844c · Dec 17, 2025 · 1 fileMessage 50 · ThinInformational 15Details
Commit message · Hennadii Stepanov

iwyu: Add patch to prefer C++ headers over C counterparts

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only changes a patch file used by the continuous-integration (CI) 'include what you use' (IWYU) linting tool. It tells the linter to recommend C++ standard headers (like <cstdio>) instead of C-style headers (like <stdio.h>) when reviewing Bitcoin Core source code. The change does not alter any compiled Bitcoin Core code, runtime behavior, or network protocol, so it has no direct security impact on users running Bitcoin Core.

Lower-priorityiwyu: Add patch to prefer angled brackets over quotes for includesby Hennadii Stepanov · 7a65437e · Dec 17, 2025 · 4 filesMessage 50 · ThinInformational 15Details
Commit message · Hennadii Stepanov

iwyu: Add patch to prefer angled brackets over quotes for includes

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a build-tooling change only. It adds a patch for the Include What You Use (IWYU) static-analysis tool used in Bitcoin Core's continuous integration (CI). The patch forces IWYU to suggest C++ #include statements using angle brackets (<...>) instead of quoted local paths ("..."). There is no change to Bitcoin Core's actual consensus, networking, wallet, or node code, and no security-relevant behavior is modified.

Lower-prioritylog: Use `__func__` for -logsourcelocationsby MarcoFalke · facd3d56 · Dec 17, 2025 · 4 filesMessage 45 · ThinInformational 15Details
Commit message · MarcoFalke

log: Use `__func__` for -logsourcelocations

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit changes Bitcoin Core's logging system so that when the optional -logsourcelocations setting is enabled, log lines show only the simple function name (e.g., 'ProcessMessage') instead of the full C++ function signature (e.g., 'void ProcessMessage(...)'). It introduces a small wrapper class around std::source_location to allow overriding the function name with the __func__ macro. There is no security fix here; it is a user-facing log-format cleanup.

AI review queuednet: Fix `-Wmissing-braces`by Hennadii Stepanov · f46e3ec0 · Dec 17, 2025 · 5 filesMessage 35 · OpaqueInformational 15Details
Commit message · Hennadii Stepanov

net: Fix `-Wmissing-braces`

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit is a portability fix for compiler warnings about missing braces when initializing IPv6 address constants. It introduces platform-specific macros so the code compiles cleanly on illumos and Microsoft Visual C++ without changing behavior. There is no security issue here.

Lower-priorityfuzz: doc: remove any mention to address_deserialize_v2by brunoerg · caf4843a · Dec 17, 2025 · 2 filesMessage 60 · AdequateInformational 15Details
Commit message · brunoerg

fuzz: doc: remove any mention to address_deserialize_v2

60/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit is a documentation-only cleanup. It replaces an outdated example fuzz target name (address_deserialize_v2) with the current name (address_deserialize) in a user guide and a code comment. No executable code, logic, or security behavior is changed.

Lower-prioritymove-only: MAX_BLOCK_TIME_GAP to src/qtby MarcoFalke · fa5ed16a · Dec 17, 2025 · 2 filesMessage 60 · AdequateInformational 15Details
Commit message · MarcoFalke

move-only: MAX_BLOCK_TIME_GAP to src/qt

Can be reviewed via the git option:
--color-moved=dimmed-zebra

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit simply moves a constant named MAX_BLOCK_TIME_GAP from one source file (src/chain.h) to another (src/qt/bitcoingui.cpp). The value and its meaning stay exactly the same. It is a code-cleanup change with no functional or security effect.

Lower-priorityfix(qa-tests): Bring back decoding of exception fieldby Hodlinator · 69bcfcad · Dec 17, 2025 · 1 fileMessage 100 · StrongInformational 15Details
Commit message · Hodlinator

fix(qa-tests): Bring back decoding of exception field

Partial revert of fab085c15f7221986f73af7e05e799edf3eadaf0

subprocess.run(..., text=True) is not sufficient to make the TimeoutExpired exception stop using byte buffers. This is a known issue, see: https://github.com/python/cpython/issues/87597

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This is a tiny fix to a Bitcoin Core internal QA test script. A previous change tried to make a subprocess error message readable by enabling text mode, but Python still stores the output as bytes in TimeoutExpired exceptions. The patch adds an explicit .decode('utf-8') so the test's debug printout works instead of crashing with a bytes/string formatting error. It only affects test failure diagnostics, not live Bitcoin node code, wallets, consensus, or network behavior.

Lower-priorityqa: Improve assert_start_raises_init_error outputby Hodlinator · fb43b2f8 · Dec 17, 2025 · 1 fileMessage 58 · ThinInformational 15Details
Commit message · Hodlinator

qa: Improve assert_start_raises_init_error output

Re-raising within the except-block would trigger excessive "During handling of the above exception, another exception occurred"-output.

Also changed comment - exceptions are raised in Python, not thrown.

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a small cleanup in Bitcoin Core's internal test helper code. It changes how an error message is re-raised so that Python no longer prints a confusing 'another exception occurred' chain when a test node fails to start. There is no change to the Bitcoin network protocol, wallet handling, consensus rules, or any production code.

Lower-priorityqa-tests: Add test for timeouts due to missing init errorsby Hodlinator · 7427a03b · Dec 17, 2025 · 1 fileMessage 95 · StrongInformational 15Details
Commit message · Hodlinator

qa-tests: Add test for timeouts due to missing init errors

Verifies that the fix to assert_start_raises_init_error in an earlier commit stays intact, with only one exception being raised instead of multiple.

95/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only adds a new automated test to Bitcoin Core's internal quality-assurance suite. It checks that a helper function used during testing raises exactly one exception when a node startup error does not occur within the expected timeout. There is no change to production code, no user-facing behavior change, and no security vulnerability being fixed.

Lower-priorityqa-tests: Log expected output in debugby Hodlinator · 356883f0 · Dec 17, 2025 · 1 fileMessage 78 · AdequateInformational 15Details
Commit message · Hodlinator

qa-tests: Log expected output in debug

Helpful when comparing expected/unexpected outputs against each other for working/broken code.

Also account for TimeoutExpired.output being None and halt instead of re-raising.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This is a minor improvement to a Bitcoin Core test script. It adds clearer debug logging when a test child process produces the expected output, and it handles the edge case where a timeout occurs with no captured output. There is no change to the actual Bitcoin Core software that users run, and no security issue is present.

Lower-priorityrefactor(qa-tests): Extract InternalDurationTestMixin for use in next commitby Hodlinator · d7f703c1 · Dec 17, 2025 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · Hodlinator

refactor(qa-tests): Extract InternalDurationTestMixin for use in next commit

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This is a small test-code cleanup that moves a helper for calculating RPC timeout into a reusable mixin. It does not change Bitcoin Core's production code, network behavior, or wallet security. There is no vulnerability here.

Lower-priorityrest: print also HTTP response reason in case of an errorby Roman Zeyde · 59b93f11 · Dec 16, 2025 · 1 fileMessage 50 · ThinInformational 15Details
Commit message · Roman Zeyde

rest: print also HTTP response reason in case of an error

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only changes an error message in a test file so that when a test fails, it prints the HTTP reason phrase (like 'Not Found') alongside the status code. It does not change any production code, user-facing behavior, or security logic.

Lower-priorityrest: add a test for unsuported `/blockpart/` request typeby Roman Zeyde · 7fe94a04 · Dec 16, 2025 · 1 fileMessage 60 · AdequateInformational 14Details
Commit message · Roman Zeyde

rest: add a test for unsuported `/blockpart/` request type

60/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 14/100

This commit only adds a new automated test to Bitcoin Core's REST interface test suite. It checks that the /blockpart/ endpoint correctly rejects unsupported request types with proper error messages. There is no code change to the actual REST server behavior, and no security vulnerability is being fixed.

Security candidatescripted-diff: [doc] Unify stale copyright headersby MarcoFalke · fa5f2977 · Dec 16, 2025 · 988 filesMessage 83 · StrongInformational 15Details
Commit message · MarcoFalke

scripted-diff: [doc] Unify stale copyright headers

-BEGIN VERIFY SCRIPT-

sed --in-place --regexp-extended \
's;( 20[0-2][0-9])(-20[0-2][0-9])? The Bitcoin Core developers;\1-present The Bitcoin Core developers;g' \
$( git grep -l 'The Bitcoin Core developers' -- ':(exclude)COPYING' ':(exclude)src/ipc/libmultiprocess' ':(exclude)src/minisketch' )

-END VERIFY SCRIPT-

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
cryptography-sensitive pathseed or entropy pathsigning or wallet pathauthentication pathparser or protocol path
AI analysis · Informational 15/100

This commit is a bulk update of copyright notice years in source-code comments. It changes phrases like '2012-2022 The Bitcoin Core developers' to '2012-present The Bitcoin Core developers' across 988 files. There are no changes to program logic, no bug fixes, and no security-related code changes.

Security candidateci: Pin native tests on cross-builds to same commitby MarcoFalke · faa8ee62 · Dec 16, 2025 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · MarcoFalke

ci: Pin native tests on cross-builds to same commit

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
access controldocumentation-only discount
AI analysis · Informational 15/100

This commit changes Bitcoin Core's GitHub Actions CI workflow so that when a Windows cross-build job runs, a separate job records the exact commit ID being built, and the follow-on native Windows test job checks out that same recorded commit. This prevents a race condition where a new commit pushed during the cross-build could cause the native tests to run against different source code than what was compiled. It is a CI reliability improvement, not a security fix.

Lower-prioritydoc: add release notes for 29415by Vasil Dimov · 89372213 · Dec 16, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Vasil Dimov

doc: add release notes for 29415

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only adds documentation: a release note describing a previously merged privacy feature (PR #29415). It does not change any code, so it cannot introduce or fix a security vulnerability on its own. The feature it describes lets users optionally broadcast transactions only over Tor or I2P to hide their IP address and avoid linking separate transactions.

Lower-prioritytest: add unit test for the private broadcast storageby Vasil Dimov · 582016fa · Dec 16, 2025 · 2 filesMessage 72 · AdequateInformational 15Details
Commit message · Vasil Dimov

test: add unit test for the private broadcast storage

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only adds a new unit test file for an existing feature called private broadcast storage. It does not change any production code, so it cannot introduce a security vulnerability or fix one on its own.

Lower-prioritytest: add functional test for private broadcastby Vasil Dimov · e74d54e0 · Dec 16, 2025 · 2 filesMessage 67 · AdequateInformational 15Details
Commit message · Vasil Dimov

test: add functional test for private broadcast

67/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only adds a new automated test file for Bitcoin Core's existing 'private broadcast' feature. It does not change any production code, so it cannot introduce a security vulnerability or fix one. The test verifies that transactions submitted through the RPC are broadcast privately over Tor/I2P-style connections and checks related edge cases.

Lower-priorityrpc: use private broadcast from sendrawtransaction RPC if -privatebroadcast is ONby Vasil Dimov · 818b780a · Dec 16, 2025 · 1 fileMessage 50 · ThinInformational 19Details
Commit message · Vasil Dimov

rpc: use private broadcast from sendrawtransaction RPC if -privatebroadcast is ON

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 19/100

This commit updates the sendrawtransaction RPC command so that, when the optional -privatebroadcast setting is enabled, it broadcasts raw transactions over privacy-preserving networks (Tor/I2P) instead of sending them to all connected peers. It also adds a check that at least one of those networks is reachable, and updates the command's help text. There is no direct evidence in the commit of a security vulnerability being fixed; it appears to be a privacy feature enhancement.

Lower-prioritynet_processing: retry private broadcastby Vasil Dimov · eab595f9 · Dec 16, 2025 · 5 filesMessage 58 · ThinLow 26Details
Commit message · Vasil Dimov

net_processing: retry private broadcast

Periodically check for stale transactions in peerman and if found,
reschedule new connections to be opened by connman for broadcasting
them.

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
AI analysis · Low 26/100

This commit adds a retry mechanism for a new optional 'private transaction broadcast' feature in Bitcoin Core. If a transaction sent privately isn't seen back from the network within about a minute, the node schedules extra private outgoing connections to rebroadcast it. It is a feature-completion patch, not a fix for an active vulnerability, and it does not appear to introduce obvious security bugs on its own.

Lower-prioritynet_processing: stop private broadcast of a transaction after round-tripby Vasil Dimov · 37b79f9c · Dec 16, 2025 · 3 filesMessage 73 · AdequateLow 36Details
Commit message · Vasil Dimov

net_processing: stop private broadcast of a transaction after round-trip

Remove the transaction from the list of transactions to broadcast after
we receive it from the network.

Only remove the transaction if it is the same as the one we sent: has
the same wtxid (and it follows the same txid). Don't remove transactions
that have the same txid and different wtxid. Such transactions show that
some of the private broadcast recipients malleated the witness and the
transaction made it back to us. The witness could be either:
* invalid, in which case the transaction will not be accepted in
anybody's pool; or
* valid, in which case either the original or the malleated transaction
will make it to nodes' mempools and eventually be mined. Our response
is to keep broadcasting the original. If the malleated transaction
wins then we will eventually stop broadcasting the original when it
gets stale and gets removed from the "to broadcast" storage cause it
is not acceptable in our mempool.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Low 36/100

This Bitcoin Core change improves how the node stops privately re-broadcasting a transaction once it sees that same transaction come back from the network. It is a hardening/efficiency fix for the new private transaction broadcast feature, not a fix for a known remote exploit. The patch makes the node stop its private re-broadcast attempts when the exact transaction it sent is seen again, while still continuing to broadcast the original if a peer returns a malleated (altered-witness) version.

Lower-prioritynet_processing: handle ConnectionType::PRIVATE_BROADCAST connectionsby Vasil Dimov · 2de53eee · Dec 16, 2025 · 4 filesMessage 73 · AdequateLow 42Details
Commit message · Vasil Dimov

net_processing: handle ConnectionType::PRIVATE_BROADCAST connections

For connections of type `ConnectionType::PRIVATE_BROADCAST`:
* After receiving VERACK, send a transaction from the list of
transactions for private broadcast and disconnect
* Don't process any messages after VERACK (modulo `GETDATA` and `PONG`)
* Don't send any messages other than the minimum required for the
transaction send - `INV`, `TX`, `PING`.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Low 42/100

This commit adds a new 'private broadcast' feature in Bitcoin Core that lets users send transactions through short-lived, disguised peer connections to reduce the risk that someone watching the network can figure out which IP address originated a transaction. The patch also fixes a related privacy leak: without the change, a malicious peer could have tricked the node into revealing its real network address during one of these private broadcasts. The commit is defensive and improves privacy, but it is a new and complex network feature, so it deserves careful review.

Lower-prioritynet_processing: move a debug check in VERACK processing earlierby Vasil Dimov · 30a9853a · Dec 16, 2025 · 1 fileMessage 73 · AdequateInformational 15Details
Commit message · Vasil Dimov

net_processing: move a debug check in VERACK processing earlier

The following commit will interrupt the processing of the `VERACK`
message earlier for private broadcast connections. The `Assume()` would
be nice to have for private broadcast as well, so move it earlier.

This is a non-functional change.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit simply moves an internal consistency check (an `Assume()` assertion) to an earlier point in the code that handles a peer's VERACK message. The check itself and the surrounding logic are unchanged. The author explicitly states this is a non-functional change, meaning it does not alter program behavior in release builds or fix any active bug.

Lower-prioritynet_processing: modernize PushNodeVersion()by Vasil Dimov · d1092e5d · Dec 16, 2025 · 1 fileMessage 58 · ThinInformational 15Details
Commit message · Vasil Dimov

net_processing: modernize PushNodeVersion()

Rename some variables in `PeerManagerImpl::PushNodeVersion()` and
use one log call instead of 2 almost identical. Also, assign
variables after they are declared to make it easy to assign them
different values, conditionally.

This is a non-functional change.

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a straightforward code cleanup in Bitcoin Core's network handshake routine. It renames local variables, splits declarations from assignments, and merges two nearly identical log lines into one. The commit message explicitly calls it a non-functional change, and the diff shows no altered behavior, no new network data, and no changed security checks.

Lower-prioritynet_processing: move the debug log about receiving VERSION earlierby Vasil Dimov · 9937a12a · Dec 16, 2025 · 1 fileMessage 73 · AdequateInformational 15Details
Commit message · Vasil Dimov

net_processing: move the debug log about receiving VERSION earlier

Move the debug log message that we have received a `VERSION` message
earlier, before any `MakeAndPushMessage()`. Thus, if the processing is
interrupted before `MakeAndPushMessage()`s, the log would still be
executed.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit simply moves a diagnostic log message that records receipt of a peer's VERSION message to an earlier point in the network processing code. It does not change any protocol behavior, validation logic, or security checks. The change only affects debug logging output, making it more likely the log line is printed even if the connection is interrupted shortly after receiving VERSION. There is no security issue here.