BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2902 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

254security candidates607second-pass queue2881AI analyses
192commits · 30 days
486commits · 60 days
1502commits · 180 days
2875commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
939Strong · 80–100
1188Adequate · 60–79
687Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow15750157064
MarcoFalke41021406074
Lőrinc17721177081
fanquake22719226057
Hennadii Stepanov20914208063
rkrux57957074
Sjors Provoost89889074
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Hodlinator66566076
Analysis record

Published AI watches

Last scanned 30 minutes ago

Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable misc-definitions-in-headers

This commit is a code cleanup: it turns on a clang-tidy style check called 'misc-definitions-in-headers' and suppresses that check around a large inline implementation block in a benchmark header. There is no change to Bitcoin's runtime be…

fa93132dby MarcoFalke+3−02 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable clang-tidy rule to reject anon namespace in header

This commit only changes a linting configuration file for the project's code style checker. It enables a rule that prevents anonymous namespaces from being used in header files, which is a code-quality and build-hygiene practice. There is …

No security-relevant signals in the diff or commit message.Change is purely a static-analysis/linting configuration update.
fa5ca877by MarcoFalke+2−11 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Use C++20 std::identity over IntIdentity

This commit is a straightforward code cleanup: it replaces a small custom helper named IntIdentity with the standard C++20 std::identity from the <functional> header. The behavior of the ConvertBits function is unchanged; only the implemen…

fafe5042by MarcoFalke+4−111 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test the result order of a multiple import request is correct

This commit only adds a new automated test to Bitcoin Core. It checks that when a user asks the wallet to import multiple descriptors at once, the list of results comes back in the same order as the original request, including any error me…

3ac8b806by Pol Espinasa+40−01 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test invalid or missing timestamp throws importdescriptors

This commit only adds new automated tests for the Bitcoin Core wallet's importdescriptors RPC. It checks that the command correctly rejects requests with a missing or invalid timestamp. No production wallet code is changed, so this cannot …

No changes to consensus, networking, wallet logic, or cryptographyOnly functional test code is modifiedAdded assertions are for expected error handling paths
e4732bf0by Pol Espinasa+28−11 file
No security note in commit
Informational 15 AI analysisMessage 80 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Remove unused #include in common/system

This is a minor code cleanup that removes one unused header file include and swaps another for a more specific one. It does not change any program behavior or fix any security issue.

fa7304f3by MarcoFalke+1−22 files
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

iwyu: Fix warnings in `src/consensus` and treat them as errors

This commit is a routine code cleanup: it adjusts which C++ header files are included in several consensus-related source files and turns on a stricter compiler hygiene check (Include What You Use, or IWYU) for the src/consensus directory.…

13b53f8bby Hennadii Stepanov+42−79 files
No security note in commit
Informational 15 AI analysisMessage 55 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

fuzz: don't connman.ReceiveMsgFrom oversized msg

This is a small fix to a Bitcoin Core fuzz test (an automated internal testing harness), not to the live network code. The fuzzer was sometimes creating fake P2P messages larger than the real protocol allows and passing them into a test he…

Test-only fuzz harness hardeningOversized message guard added before ReceiveMsgFrom() in fuzz targetNo change to production P2P message acceptance logic
bb19f1daby Greg Sanders+5−01 file
No security note in commit
Informational 15 AI analysisMessage 97 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: Temporarily remove riscv32 config from GHA matrix

This commit simply removes one failing test configuration (RISC-V 32-bit bare metal) from the project's GitHub Actions CI matrix because it was failing. It is a routine CI maintenance change with no security implications.

fa06ea42by MarcoFalke+0−61 file
No security note in commit
Low 47 AI analysisMessage 90 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: verify cross-build SDK archives

This change adds checksum verification to the build system's downloads of Apple, FreeBSD, NetBSD, and OpenBSD software development kits (SDKs). Before this patch, those SDK archives were downloaded at build time and extracted without confi…

Adds cryptographic digest verification for downloaded SDK archivesRemoves unchecked extraction of remote SDK archives in CIHardens CI supply chain for macOS/BSD cross-builds
873550beby Lőrinc+25−126 files
Vendor flagged security relevance
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritytest: interface_ipc.py minor fixes and cleanupby Ryan Ofsky · a5e61b19 · Dec 9, 2025 · 1 fileMessage 100 · StrongInformational 15Details
Commit message · Ryan Ofsky

test: interface_ipc.py minor fixes and cleanup

There are a few things that are incorrect or messy in the interface_ipc.py test.
This commit tries to clean them up:

- isTestChain and isInitialBlockDownload asserts were not checking the results
of those calls, only that calls were, made because they were not checking the
responses' .result member.

- A lot of result accesses like `template.result` `mining.result` were repeated
unnecessarily because variables like `template` and `mining` were assigned
response objects instead of result objects. These variables are now changed
to point directly to results.

- Some coroutine calls were assigned to temporary `wait` before being awaited.
This was unnecessarily confusing and would make code not run in top-down
order.

- `to_dict` calls were being made to check if result variables were unset. This
was inefficient and indirect because it iterates over all fields in response
structs instead of just checking whether the result field is present. The
to_dict calls are now replaced with more direct `_has('result')` calls.

- The `res` variables used to hold various responses did not have descriptive
names. These are replaced with clearer names.

Co-authored-by: rkrux <rkrux.connect@gmail.com>

100/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only cleans up a single test file. It fixes how the test checks return values from internal Bitcoin IPC calls and renames some variables for clarity. It does not change any production code that handles real Bitcoin transactions, blocks, or network messages, so it has no direct security impact on running Bitcoin nodes.

Lower-prioritynet: Pass time to InactivityChecks fuctionsby Anthony Towns · cea443e2 · Dec 6, 2025 · 2 filesMessage 68 · AdequateInformational 15Details
Commit message · Anthony Towns

net: Pass time to InactivityChecks fuctions

We run InactivityChecks() for each node everytime poll()/select() every
50ms or so. Rather than calculating the current time once for each node,
just calculate it once and reuse it.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a small performance and consistency cleanup in Bitcoin Core's network code. It changes the inactivity timeout checks so that the current time is fetched once per loop and passed into helper functions, rather than each helper fetching its own slightly different timestamp. There is no security-relevant change here.

AI review queuedrefactor: Enable clang-tidy bugprone-unused-return-valueby MarcoFalke · faa23738 · Dec 6, 2025 · 6 filesMessage 85 · StrongInformational 15Details
Commit message · MarcoFalke

refactor: Enable clang-tidy bugprone-unused-return-value

This requires some small refactors to silence false-positive warnings.

Also, expand the bugprone-unused-return-value.CheckedReturnTypes option
to include util::Result, and util::Expected.

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This is a code cleanup change that turns on a static-analysis check (clang-tidy 'bugprone-unused-return-value') and makes small, behavior-preserving edits so the codebase passes the new check. It does not fix a security bug or change how the software behaves at runtime.

Lower-priorityAdd util::Expected (std::expected)by MarcoFalke · fa114be2 · Dec 6, 2025 · 9 filesMessage 45 · ThinInformational 15Details
Commit message · MarcoFalke

Add util::Expected (std::expected)

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit introduces a new internal helper class, util::Expected, that gives Bitcoin Core a cleaner way to return either a successful result or an error message from a function. It is a pure code-quality/refactoring change: it replaces the existing std::optional<std::string> pattern used by FetchBlock with the new Expected<void, std::string> type. There is no change to network behavior, RPC behavior, or consensus rules, and no security bug is fixed or introduced.

Lower-priorityfuzz: Add a test case for `ParseByteUnits()`by Chandra Pratap · 57b888ce · Dec 5, 2025 · 1 fileMessage 78 · AdequateInformational 15Details
Commit message · Chandra Pratap

fuzz: Add a test case for `ParseByteUnits()`

`ParseByteUnits()` is the only parsing function in `strencodings.cpp`
lacking a fuzz test. Add a test case to check the function against
arbitrary strings and randomized default_multiplier's.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit only adds a new fuzz test for an existing string-parsing helper called ParseByteUnits(). It does not change any production code, fix a bug, or alter behavior. Fuzz tests feed random inputs to functions to help find crashes or bugs during automated testing, but the function itself is unchanged.

Lower-priorityrefactor: Remove unused LogPrintfby MarcoFalke · fa4395df · Dec 4, 2025 · 3 filesMessage 47 · ThinInformational 15Details
Commit message · MarcoFalke

refactor: Remove unused LogPrintf

47/100 · ThinMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a routine code cleanup. It removes the old `LogPrintf` logging macro, which was already marked as deprecated and was simply an alias for the newer `LogInfo`. The change updates documentation and a test case to match. There is no security issue here.

AI review queuedscripted-diff: LogPrintf -> LogInfoby MarcoFalke · fa05181d · Dec 4, 2025 · 15 filesMessage 68 · AdequateInformational 15Details
Commit message · MarcoFalke

scripted-diff: LogPrintf -> LogInfo

This refactor does not change behavior.

-BEGIN VERIFY SCRIPT-

sed --in-place 's/\<LogPrintf\>/LogInfo/g' \
$( git grep -l '\<LogPrintf\>' -- ./contrib/ ./src/ ./test/ ':(exclude)src/logging.h' )

-END VERIFY SCRIPT-

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a simple automated rename that changes every use of the logging macro LogPrintf to LogInfo across 15 source files. The commit message and the included verification script confirm it is a pure refactor with no intended behavior change. There is no security issue here.

Lower-priorityindex: restrict index helper function to namespaceby Martin Zumsande · 5646e6c0 · Dec 4, 2025 · 3 filesMessage 50 · ThinInformational 15Details
Commit message · Martin Zumsande

index: restrict index helper function to namespace

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This change is a simple code cleanup: it wraps some shared helper functions and constants in a namespace called index_util and updates the two files that use them to reference the new namespace. There is no change to what the code does, only to how it is organized. It does not fix a security bug or introduce a vulnerability.

Lower-priorityindex, refactor: deduplicate LookUpOneby Martin Zumsande · 032f3503 · Dec 4, 2025 · 3 filesMessage 58 · ThinInformational 15Details
Commit message · Martin Zumsande

index, refactor: deduplicate LookUpOne

LookUpOne is used by both coinstatsindex and blockfilterindex,
the two implementations had already started to deviate slightly
for no apparent reason.

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a simple code cleanup: it removes two nearly identical helper functions from two separate files and puts one shared copy in a common header. The behavior of the function is unchanged; only its location and the way callers pass block information to it are adjusted. There is no security fix here.

Lower-priorityindex: deduplicate Hash / Height handlingby Martin Zumsande · a67d3eb9 · Dec 4, 2025 · 3 filesMessage 68 · AdequateInformational 15Details
Commit message · Martin Zumsande

index: deduplicate Hash / Height handling

The code was largely duplicated between coinstatsindex
and blockfilterindex.
Deduplicate it by moving it to a shared file.

slight change in behavior: the index name is no longer
part of the error msg in case of (un)serialization errors.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a routine code cleanup: it moves duplicated database-key handling code shared by two Bitcoin Core indexes into one shared header file. The actual behavior is essentially unchanged, except that a couple of error messages now say 'index' generically instead of naming the specific index. There is no security fix or vulnerability here.

Lower-priorityinit: point out -stopatheight may be impreciseby brunoerg · ff06e246 · Dec 4, 2025 · 1 fileMessage 45 · ThinInformational 17Details
Commit message · brunoerg

init: point out -stopatheight may be imprecise

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 17/100

This commit only changes the help text for a debug/test command-line option called -stopatheight. It adds a note warning users that the node might process a few blocks past the target height while shutting down. There is no code behavior change, no bug fix, and no security issue.

Lower-prioritytest: fix interface_ipc.py template destructionby Ryan Ofsky · ded11fb0 · Dec 3, 2025 · 1 fileMessage 100 · StrongInformational 14Details
Commit message · Ryan Ofsky

test: fix interface_ipc.py template destruction

Use context managers to destroy block templates. Previously, block templates
were not being destroyed before disconnecting because the destroy coroutines
were called but never awaited. It's not necessary to explicitly destroy the
templates since they will get garbage collected asynchronously, but it's good
to destroy them to make the test more predictable, and to make the destroy
calls that are present actually do something.

This change also removes `await waitnext` expressions without changing
behavior, because the previous code was misleading about what order waitNext
calls were executed.

This change is easiest to review ignoring whitespace.

Co-authored-by: Sjors Provoost <sjors@sprovoost.nl>

100/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 14/100

This is a test-only cleanup in Bitcoin Core's functional test suite. It fixes how temporary 'block template' objects are cleaned up during an automated test by using Python context managers. The old code called destroy routines but forgot to 'await' them, so cleanup happened later by garbage collection instead of immediately. There is no change to the actual Bitcoin node software, no security vulnerability in production code, and no attacker-accessible behavior changed.

Lower-prioritytest: fix test_limit_enforcement_packageby Greg Sanders · 0a8d303d · Dec 3, 2025 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · Greg Sanders

test: fix test_limit_enforcement_package

The current test has a couple issues:

1) the parent_tx_good is regenerating the exact same
transaction that is already in the cluster, so it's
resulting in no replacements on submission
2) once fixed, the additional fee needs to be allocated to
the parent transaction in the package, not the child. If the
RBF fees are allocated to the child, this triggers the
package RBF logic, which requires no in-mempool ancestors to
be present.

Fix the bug and add a few assertions to protect against
regressions.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit fixes a bug in a Bitcoin Core functional test, not in the actual Bitcoin network code. The test was accidentally creating the same transaction twice and putting fees on the wrong transaction, so it wasn't really testing what it was supposed to test. The fix makes the test exercise the intended cluster-size-limit enforcement behavior correctly. There is no security issue in production software here.

AI review queuedrefactor: unify container presence checks - non-trivial countsby Lőrinc · d9319b06 · Dec 3, 2025 · 5 filesMessage 85 · StrongInformational 15Details
Commit message · Lőrinc

refactor: unify container presence checks - non-trivial counts

The changes made here were:

| From | To |
|-------------------|------------------|
| `m.count(k) == 1` | `m.contains(k)` |
| `m.count(k) == 0` | `!m.contains(k)` |
| `m.count(k) != 1` | `!m.contains(k)` |
| `m.count(k) < 1` | `!m.contains(k)` |

* `mapInfo` is instance of `std::unordered_map` and can only contain 0 or 1 value for a given key;
* similarly, `g_enabled_filter_types` and `setClientRules` are both `std::set` instances;
* lastly, while `mapTxSpends` is `std::unordered_multimap` that could potentially hold multiple values, having a size less than 1 means that the value is missing.

`QMap<WalletModel*, WalletView*> mapWalletViews` values were also migrated manually.

Co-authored-by: pablomartin4btc <pablomartin4btc@gmail.com>
Co-authored-by: fanquake <fanquake@gmail.com>

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a code cleanup that replaces old-style 'count the number of matching entries' checks with newer, clearer 'does this container contain the key' checks. It does not change program behavior, fix a bug, or address a security issue. It is purely a readability and maintainability improvement.

AI review queuedrefactor: unify container presence checks - trivial countsby Lőrinc · 03930755 · Dec 3, 2025 · 56 filesMessage 85 · StrongInformational 15Details
Commit message · Lőrinc

refactor: unify container presence checks - trivial counts

The changes made here were:

| From | To |
|-------------------|------------------|
| `m.count(k)` | `m.contains(k)` |
| `!m.count(k)` | `!m.contains(k)` |
| `m.count(k) == 0` | `!m.contains(k)` |
| `m.count(k) != 0` | `m.contains(k)` |
| `m.count(k) > 0` | `m.contains(k)` |

The commit contains the trivial, mechanical refactors where it doesn't matter if the container can have multiple elements or not

Co-authored-by: Jan B <608446+janb84@users.noreply.github.com>

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: unusually broad changesecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a pure code cleanup: it replaces older-style container lookups like `m.count(k)` with the newer, clearer `m.contains(k)` across many files. The behavior is identical, so there is no security impact.

AI review queuedrefactor: unify container presence checks - findby Lőrinc · 8bb9219b · Dec 3, 2025 · 9 filesMessage 80 · StrongInformational 15Details
Commit message · Lőrinc

refactor: unify container presence checks - find

The changes made here were:

| From | To |
|------------------------|------------------|
| `m.find(k) == m.end()` | `!m.contains(k)` |
| `m.find(k) != m.end()` | `m.contains(k)` |

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a pure code cleanup: it replaces verbose 'find ... == end()' checks with the simpler 'contains()' method on C++ containers. There is no change in behavior, no bug fix, and no security impact.

Lower-prioritycontrib: fix manpage generationby fanquake · e9536faa · Dec 3, 2025 · 1 fileMessage 78 · AdequateInformational 15Details
Commit message · fanquake

contrib: fix manpage generation

0972f5504021b482b27523fd3bcb8036cf6b439c from #33229 broke manpage
generation, because the assumption that the last word in the line
containing the version number, was the version number, no-longer holds
for some binaries. i.e bitcoind.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This is a small fix to a developer helper script that generates manual pages for Bitcoin Core command-line programs. A previous change caused the script to grab the wrong word from the program's version output, so it could not build the man pages. The patch uses a regular expression to reliably find the version string. It does not change any network, wallet, or consensus code and has no security relevance.

Lower-priorityvalidation: Reword CheckForkWarningConditions and call it also during IBD and at startupby Martin Zumsande · 4b471136 · Dec 2, 2025 · 2 filesMessage 85 · StrongInformational 22Details
Commit message · Martin Zumsande

validation: Reword CheckForkWarningConditions and call it also during IBD and at startup

The existing IBD disable was added at a time when CheckForkWarningConditions
did also sophisticated fork detection that could lead to false positives
during IBD (55ed3f14751206fc87f0cbf8cb4e223efacef338).

The fork detection logic doesn't exist anymore
(since fa62304c9760f0de9838e56150008816e7a9bacb), so the IBD check is no
longer necessary.

Displaying the log at startup will help node operators diagnose the
problem better.

Also unify log message and alert warning text, since a long invalid chain
could be due to chainstate corruption or an actual consensus incompatibility
with peers. Previously the log assumed the former and the alert the latter.

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 22/100

This Bitcoin Core commit changes when and how the node warns users about a potentially serious problem: an invalid blockchain that has more work than the node's own best chain. Previously, the warning was skipped while the node was still downloading the blockchain for the first time (Initial Block Download, or IBD). Now it also runs at startup and during IBD. The wording is also made more neutral, mentioning both database corruption and consensus incompatibility as possible causes, instead of assuming corruption. This is a diagnostic/logging improvement, not a fix for an exploitable vulnerability.

Lower-priorityp2p: Add warning message when receiving headers for blocks cached as invalidby Martin Zumsande · 2f51951d · Dec 2, 2025 · 2 filesMessage 73 · AdequateInformational 20Details
Commit message · Martin Zumsande

p2p: Add warning message when receiving headers for blocks cached as invalid

Currently, if database corruption leads to a block being marked as
invalid incorrectly, we can get stuck in an infinite headerssync
loop with no indication what went wrong or how to fix it.
With the added log message, users will receive an explicit warning after each
failed headerssync attempt with an outbound peer.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 20/100

This commit only adds a clearer warning message in the log when Bitcoin Core receives block headers for blocks it has already marked as invalid. It does not change how blocks are validated, accepted, or rejected. The goal is to help users diagnose database corruption or consensus incompatibility that can cause an endless 'headers sync' loop, not to fix a security vulnerability.

Lower-priorityRevert "guix: sqlite wants tcl"by Hennadii Stepanov · 710031eb · Dec 2, 2025 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · Hennadii Stepanov

Revert "guix: sqlite wants tcl"

This reverts commit 286f3e49c84c8990eb931d1dc9db66af06c8f119.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit simply removes an unused dependency import. A previous change added the Tcl programming language package to the Guix build manifest, but it turned out SQLite did not actually need it. This revert cleans up the build configuration with no effect on Bitcoin Core's runtime security.

Lower-prioritydepends: Propagate native C compiler to `sqlite` packageby Hennadii Stepanov · 4cf5ea6c · Dec 2, 2025 · 2 filesMessage 73 · AdequateInformational 19Details
Commit message · Hennadii Stepanov

depends: Propagate native C compiler to `sqlite` package

This ensures that autosetup can build the local bootstrap `jimsh0` when
neither `jimsh` nor `tclsh` is available on the system.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 19/100

This commit fixes a build-system issue in Bitcoin Core's dependency packaging for SQLite. It ensures the correct native C compiler is passed through when SQLite's build tool (autosetup) needs to compile a small local helper program called jimsh0. It also quotes that compiler variable so paths with spaces or multiple flags don't get split incorrectly. This is a build reliability fix, not a vulnerability in Bitcoin's network code or wallet cryptography.

Security candidatedocs: clarify RPC credentials security boundaryby crStiv · 938312d7 · Dec 2, 2025 · 1 fileMessage 62 · AdequateInformational 12Details
Commit message · crStiv

docs: clarify RPC credentials security boundary

62/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Names security-relevant behavior explicitly! No meaningful explanatory body
Why it was queued
credential or privilege statedocumentation-only discount
AI analysis · Informational 12/100

This commit only updates documentation. It adds a warning to Bitcoin Core's JSON-RPC guide explaining that anyone with valid RPC credentials effectively has significant control over the node and the underlying machine, and that RPC whitelists should not be treated as a strong security boundary. No code behavior was changed.

AI review queuedtest, assumeutxo: loading a wallet (backup) on a pruned nodeby Alfonso Roman Zubeldia · cb7d5bfe · Dec 2, 2025 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · Alfonso Roman Zubeldia

test, assumeutxo: loading a wallet (backup) on a pruned node

60/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit only adds a new automated test to Bitcoin Core. It checks that wallet backups can (or cannot) be loaded on pruned nodes that are using the assumeutxo snapshot feature. There is no change to production wallet, consensus, or networking code, so it does not introduce or fix a live security issue on its own.

AI review queuedtest, refactor snapshot import and background validationby Alfonso Roman Zubeldia · 7a365244 · Dec 2, 2025 · 1 fileMessage 75 · AdequateInformational 15Details
Commit message · Alfonso Roman Zubeldia

test, refactor snapshot import and background validation

Move snapshot import validation and background validation logic
into dedicated helper functions.

75/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Mentions testing or verification
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a minor cleanup of a Bitcoin Core test file. It moves existing snapshot-import and background-validation checks into new helper functions without changing what the test actually verifies. There is no change to production code, no security fix, and no vulnerability.

AI review queuedwallet: warn against accidental unsafe older() importby Sjors Provoost · 76c092ff · Dec 2, 2025 · 7 filesMessage 73 · AdequateLow 38Details
Commit message · Sjors Provoost

wallet: warn against accidental unsafe older() import

BIP 379 allows height and time locks that have no consensus meaning in BIP 68 / BIP 112.
This is used by some protocols like Lightning to encode extra data, but is unsafe when
used unintentionally. E.g. older(65536) is equivalent to older(1).

This commit emits a warning when importing such a descriptor.

It introduces a helper ForEachNode to traverse all miniscript nodes.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Low 38/100

This change adds a warning when users import a Bitcoin wallet descriptor containing an 'older()' time or block lock that looks safe but actually has no consensus effect. Because of how Bitcoin encodes relative locktimes, values above 65535 silently wrap around: older(65536) behaves like older(1). Someone could accidentally create a wallet that unlocks far sooner than they think. The patch does not block the import; it only warns.