BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2906 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

255security candidates607second-pass queue2882AI analyses
194commits · 30 days
483commits · 60 days
1504commits · 180 days
2879commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
942Strong · 80–100
1188Adequate · 60–79
688Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow15750157064
MarcoFalke41021406074
Lőrinc17721177081
fanquake22819226057
Hennadii Stepanov21014208063
rkrux57957074
Sjors Provoost89889074
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Hodlinator66566076
Analysis record

Published AI watches

Last scanned 42 minutes ago

Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35937: test: Append print_suppressions=0 to LSAN_OPTIONS, and suppress bitcoin-qt

This commit only changes test configuration. It tells the LeakSanitizer tool used during automated testing to stop printing long lists of suppressed memory leaks, and it narrows the list of ignored leaks to the bitcoin-qt GUI test binary. …

5973e075by merge-script+3−42 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable misc-definitions-in-headers

This commit is a code cleanup: it turns on a clang-tidy style check called 'misc-definitions-in-headers' and suppresses that check around a large inline implementation block in a benchmark header. There is no change to Bitcoin's runtime be…

fa93132dby MarcoFalke+3−02 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable clang-tidy rule to reject anon namespace in header

This commit only changes a linting configuration file for the project's code style checker. It enables a rule that prevents anonymous namespaces from being used in header files, which is a code-quality and build-hygiene practice. There is …

No security-relevant signals in the diff or commit message.Change is purely a static-analysis/linting configuration update.
fa5ca877by MarcoFalke+2−11 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Use C++20 std::identity over IntIdentity

This commit is a straightforward code cleanup: it replaces a small custom helper named IntIdentity with the standard C++20 std::identity from the <functional> header. The behavior of the ConvertBits function is unchanged; only the implemen…

fafe5042by MarcoFalke+4−111 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test the result order of a multiple import request is correct

This commit only adds a new automated test to Bitcoin Core. It checks that when a user asks the wallet to import multiple descriptors at once, the list of results comes back in the same order as the original request, including any error me…

3ac8b806by Pol Espinasa+40−01 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test invalid or missing timestamp throws importdescriptors

This commit only adds new automated tests for the Bitcoin Core wallet's importdescriptors RPC. It checks that the command correctly rejects requests with a missing or invalid timestamp. No production wallet code is changed, so this cannot …

No changes to consensus, networking, wallet logic, or cryptographyOnly functional test code is modifiedAdded assertions are for expected error handling paths
e4732bf0by Pol Espinasa+28−11 file
No security note in commit
Informational 15 AI analysisMessage 80 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Remove unused #include in common/system

This is a minor code cleanup that removes one unused header file include and swaps another for a more specific one. It does not change any program behavior or fix any security issue.

fa7304f3by MarcoFalke+1−22 files
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

iwyu: Fix warnings in `src/consensus` and treat them as errors

This commit is a routine code cleanup: it adjusts which C++ header files are included in several consensus-related source files and turns on a stricter compiler hygiene check (Include What You Use, or IWYU) for the src/consensus directory.…

13b53f8bby Hennadii Stepanov+42−79 files
No security note in commit
Informational 15 AI analysisMessage 55 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

fuzz: don't connman.ReceiveMsgFrom oversized msg

This is a small fix to a Bitcoin Core fuzz test (an automated internal testing harness), not to the live network code. The fuzzer was sometimes creating fake P2P messages larger than the real protocol allows and passing them into a test he…

Test-only fuzz harness hardeningOversized message guard added before ReceiveMsgFrom() in fuzz targetNo change to production P2P message acceptance logic
bb19f1daby Greg Sanders+5−01 file
No security note in commit
Informational 15 AI analysisMessage 97 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: Temporarily remove riscv32 config from GHA matrix

This commit simply removes one failing test configuration (RISC-V 32-bit bare metal) from the project's GitHub Actions CI matrix because it was failing. It is a routine CI maintenance change with no security implications.

fa06ea42by MarcoFalke+0−61 file
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritykernel: Add chain params context option to C headerby TheCharlatan · 9e1bac45 · Nov 4, 2025 · 4 filesMessage 73 · AdequateInformational 15Details
Commit message · TheCharlatan

kernel: Add chain params context option to C header

As a first option, add the chainparams. For now these can only be
instantiated with default values. In future they may be expanded to take
their own options for regtest and signet configurations.

This commit also introduces a unique pattern for setting the option
values when calling the `*_set(...)` function.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit adds a new configuration option to the Bitcoin Core kernel library's C API, allowing users to choose which blockchain network (mainnet, testnet, signet, or regtest) the kernel should use. It is a feature addition with no apparent security relevance.

Lower-prioritykernel: Add kernel library context objectby TheCharlatan · 337ea860 · Nov 4, 2025 · 4 filesMessage 68 · AdequateInformational 15Details
Commit message · TheCharlatan

kernel: Add kernel library context object

The context introduced here holds the objects that will be required for
running validation tasks, such as the chosen chain parameters, callbacks
for validation events, and interrupt handling. These will be used by the
chainstate manager introduced in subsequent commits.

This commit also introduces conventions for defining option objects. A
common pattern throughout the C header will be:
```
options = object_option_create();
object = object_create(options);
```
This allows for more consistent usage of a "builder pattern" for
objects where options can be configured independently from
instantiation.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit adds a new 'context' object to the Bitcoin Core kernel library. It is purely an infrastructure/API change that creates a container for chain parameters, callbacks, and interrupt handling. There is no bug fix, no change to consensus rules, and no security-relevant behavior introduced.

Lower-prioritykernel: Add logging to kernel library C headerby TheCharlatan · 28d679ba · Nov 4, 2025 · 6 filesMessage 68 · AdequateInformational 19Details
Commit message · TheCharlatan

kernel: Add logging to kernel library C header

Exposing logging in the kernel library allows users to follow
operations. Users of the C header can use
`kernel_logging_connection_create(...)` to pass a callback function to
Bitcoin Core's internal logger. Additionally the level and category can
be globally configured.

By default, the logger buffers messages until
`kernel_loggin_connection_create(...)` is called. If the user does not
want any logging messages, it is recommended that
`kernel_disable_logging()` is called, which permanently disables the
logging and any buffering of messages.

Co-authored-by: stringintech <stringintech@gmail.com>

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 19/100

This commit adds a new logging feature to Bitcoin Core's kernel library so that outside programs using the library can receive internal log messages through a callback. It is a feature addition, not a fix for a security flaw. There is no indication in the commit or supplied references that this addresses a vulnerability.

AI review queuedkernel: Introduce initial kernel C header APIby TheCharlatan · 2cf136de · Nov 4, 2025 · 14 filesMessage 90 · StrongLow 26Details
Commit message · TheCharlatan

kernel: Introduce initial kernel C header API

As a first step, implement the equivalent of what was implemented in the
now deprecated libbitcoinconsensus header. Also add a test binary to
exercise the header and library.

Unlike the deprecated libbitcoinconsensus the kernel library can now use
the hardware-accelerated sha256 implementations thanks for its
statically-initialzed context. The functions kept around for
backwards-compatibility in the libbitcoinconsensus header are not ported
over. As a new header, it should not be burdened by previous
implementations. Also add a new error code for handling invalid flag
combinations, which would otherwise cause a crash.

The macros used in the new C header were adapted from the libsecp256k1
header.

To make use of the C header from C++ code, a C++ header is also
introduced for wrapping the C header. This makes it safer and easier to
use from C++ code.

Co-authored-by: stickies-v <stickies-v@protonmail.com>

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
Why it was queued
signing or wallet pathsecond-pass: broader security terminologysecond-pass: security-sensitive path
AI analysis · Low 26/100

This commit introduces a brand-new C and C++ programming interface for Bitcoin Core's experimental "kernel" library. It exposes functions for parsing transactions, reading transaction outputs, and verifying Bitcoin scripts. The change is primarily a feature addition: it replaces the older libbitcoinconsensus-style API with a cleaner, modern one and adds tests. The commit message notes that one new error code was added specifically to prevent crashes when callers combine script-verification flags in invalid ways. There is no direct evidence in the commit of an exploitable vulnerability in existing code, but the new API does handle untrusted transaction data and must be used carefully.

AI review queuedqt: Modernize custom filteringby Hennadii Stepanov · e15e8cba · Nov 3, 2025 · 1 fileMessage 58 · ThinInformational 15Details
Commit message · Hennadii Stepanov

qt: Modernize custom filtering

In `QSortFilterProxyModel`, `invalidateFilter()` is scheduled for
deprecation in Qt 6.13.
`beginFilterChange()` was introduced in Qt 6.9.
`endFilterChange()` was introduced in Qt 6.10.

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
Why it was queued
defensive validationsigning or wallet pathsecond-pass: near security thresholdsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This is a routine code modernization change in Bitcoin Core's Qt wallet interface. It replaces an older Qt filtering API call (invalidateFilter) with newer equivalents (beginFilterChange/endFilterChange) for future Qt 6 compatibility. There is no security-relevant behavior change.

AI review queueddepends: disable builtin variablesby fanquake · 52b15958 · Nov 3, 2025 · 1 fileMessage 35 · OpaqueInformational 15Details
Commit message · fanquake

depends: disable builtin variables

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit changes the Bitcoin Core dependency build system (the 'depends' Makefile) to tell GNU Make not to use its built-in default variable values. Built-in variables like 'CC' or 'CFLAGS' can silently override or mix with project-specific settings, which in rare cases could cause the wrong compiler or flags to be used when building third-party dependencies. The patch is a hardening measure rather than a fix for a known active vulnerability.

Lower-prioritydepends: disable builtin rules and suffixes.by Dmitry Goncharov · 8b5a28fa · Nov 3, 2025 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · Dmitry Goncharov

depends: disable builtin rules and suffixes.

When there is no rule to build a target in the makefile, make looks
for a builtin rule.
When --no-builtin-rules is specified make no longer performs this lookup.

E.g. the following in an excerpt from make -d output.
Here, make looks for a rule to build 'all'.

Considering target file 'all'.
File 'all' does not exist.
Looking for an implicit rule for 'all'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.o'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.c'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.cc'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.C'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.cpp'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.p'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.f'.
...
Many more lines like this are omitted.

Because this build system does not use make builtin rules or suffixes,
there is no benefit in having builtin rules enabled.

There are 2 benefits in having builtin rules disabled.

1. Improves performance by eliminating redundant lookups.
2. Simplifies troubleshooting by reducing the output of make -d or
make -p.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit changes the Bitcoin Core dependency build system to tell GNU make to stop searching for built-in pattern rules (like automatically trying to compile a .c file into an .o file). This is purely a performance and debugging cleanup: builds run slightly faster and 'make -d' output is much shorter. There is no security relevance.

Lower-priorityci: fix configure docker action inputsby will · 7632e0ba · Nov 3, 2025 · 1 fileMessage 90 · StrongInformational 18Details
Commit message · will

ci: fix configure docker action inputs

The options used were wrong in two ways: firstly they were not enforced
as a "choice" (i.e. invalid input valudes could be provided without
error) and one of the options was listed as `gh` when we passed it as
`gha` from ci.yml.

"Fix" this by removing the choice altogether but sanity-testing the
input value against an expected list using a GHA "warning" to notify of
unknown inputs.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
documentation-only discount
AI analysis · Informational 18/100

This is a minor fix to a GitHub Actions helper used in Bitcoin Core's continuous integration (CI). The action had a typo in one of its allowed options ('gh' instead of 'gha') and did not actually enforce the list of allowed values. The patch removes the broken option list and instead prints a warning if an unexpected value is provided. It is a workflow-quality fix, not a security patch for Bitcoin's code or network.

Lower-priorityrefactor: Prefer `<=>` over multiple relational operatorsby Daniel Pfeifer · 48840bfc · Nov 3, 2025 · 4 filesMessage 77 · AdequateInformational 15Details
Commit message · Daniel Pfeifer

refactor: Prefer `<=>` over multiple relational operators

Define `operator<=>` in classes that have all of `<`, `<=`, `>`, `>=`.

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit is a routine code cleanup that replaces several older-style comparison operators with C++20's newer three-way comparison operator (<=>). It does not change what the code does, only how it is written. There is no security issue here.

AI review queuedrefactor: Remove all `operator!=` definitionsby Daniel Pfeifer · 5a0f49bd · Nov 3, 2025 · 14 filesMessage 72 · AdequateInformational 15Details
Commit message · Daniel Pfeifer

refactor: Remove all `operator!=` definitions

The compiler can deduce `operator!=` from `operator==`.

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a routine code cleanup: it removes hand-written 'not equal' comparison operators across many files because modern C++ compilers can automatically generate them from the existing 'equal' operators. There is no functional change and no security risk.

AI review queuedrefactor: remove dead branches in `SingletonClusterImpl`by Lőrinc · 2d23820e · Nov 3, 2025 · 1 fileMessage 100 · StrongInformational 15Details
Commit message · Lőrinc

refactor: remove dead branches in `SingletonClusterImpl`

`SplitAll()` always calls `ApplyRemovals()` first, for a singleton, it empties the cluster, therefore any `SingletonClusterImpl` passed to `Split()` must be empty.

`TxGraphImpl::ApplyDependencies()` first merges each dependency group and asserts the group has at least one dependency.
Since `parent` != `child`, `TxGraphImpl::Merge()` upgrades the merge target to `GenericClusterImpl`, therefore the `ApplyDependencies()` is never dispatched to `SingletonClusterImpl`.

Found during review: https://github.com/bitcoin/bitcoin/pull/33157#discussion_r2423058928
Coverage evidence:
* https://maflcko.github.io/b-c-cov/fuzz.coverage/src/txgraph.cpp.gcov.html#L1446
* https://storage.googleapis.com/oss-fuzz-coverage/bitcoin-core/reports/20251103/linux/src/bitcoin-core/src/txgraph.cpp.html#L1446

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
Why it was queued
fuzzing or regression evidencesecond-pass: broader security terminology
AI analysis · Informational 15/100

This is a code cleanup change in Bitcoin Core's internal transaction graph logic. It removes branches of code that the author proved can never actually run, replacing them with explicit 'this should never happen' assumptions. There is no security bug being fixed; it is purely a refactoring to simplify the code and document invariants.

Lower-priorityrefactor: Use initializer list in CompressedHeaderby Daniela Brozzoni · e37555e5 · Nov 3, 2025 · 1 fileMessage 77 · AdequateInformational 15Details
Commit message · Daniela Brozzoni

refactor: Use initializer list in CompressedHeader

Also mark CompressedHeader as explicit, and GetFullHeader as const

Co-Authored-By: Aurèle Oulès <aurele@oules.com>

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This is a small, safe code cleanup in Bitcoin Core's header synchronization code. It changes how one internal data structure is initialized, marks a constructor as explicit to prevent accidental implicit conversions, and marks a helper method as const to indicate it does not modify the object. There is no security-relevant behavior change.

Lower-priorityrefactor: Remove unused parameter in ReportHeadersPresyncby Daniela Brozzoni · 0488bdfe · Nov 3, 2025 · 3 filesMessage 77 · AdequateInformational 15Details
Commit message · Daniela Brozzoni

refactor: Remove unused parameter in ReportHeadersPresync

Co-Authored-By: Aurèle Oulès <aurele@oules.com>

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This is a simple code cleanup: a function called ReportHeadersPresync had a 'work' parameter that was never used, so the commit removes that parameter from the function definition and from every place that calls it. There is no change to program behavior, no bug fix, and no security relevance.

Lower-priorityrefactor: Remove redundant parameter from CheckHeadersPoWby Daniela Brozzoni · 256246a9 · Nov 3, 2025 · 1 fileMessage 85 · StrongInformational 15Details
Commit message · Daniela Brozzoni

refactor: Remove redundant parameter from CheckHeadersPoW

No need to pass consensusParams, as CheckHeadersPoW already has access
to m_chainparams.GetConsensus()

Co-Authored-By: maflcko <6399679+maflcko@users.noreply.github.com>

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a minor code cleanup (refactor) in Bitcoin Core. It removes an unneeded input parameter from an internal function and makes that function fetch the same information from an existing member variable instead. The behavior of the program is unchanged.

Lower-priorityrefactor: Remove useless CBlock::GetBlockHeaderby Pieter Wuille · ca0243e3 · Nov 3, 2025 · 7 filesMessage 72 · AdequateInformational 15Details
Commit message · Pieter Wuille

refactor: Remove useless CBlock::GetBlockHeader

There is no need for a function to convert a CBlock to a CBlockHeader, as it's a child
class of it.

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit is a simple code cleanup. It removes a helper function called GetBlockHeader that copied a few fields from a full block into a block header object. Because a full block already is a block header in this codebase, the function was unnecessary. All call sites now use the block directly instead of making a copy. There is no security-relevant change.

Lower-priorityrefactor: Use std::span in HasValidProofOfWorkby Daniela Brozzoni · 45686522 · Nov 3, 2025 · 2 filesMessage 72 · AdequateInformational 15Details
Commit message · Daniela Brozzoni

refactor: Use std::span in HasValidProofOfWork

Co-Authored-By: Pieter Wuille <pieter@wuille.net>

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This is a minor code cleanup that changes how a function accepts a list of block headers. It switches from requiring a specific container type (std::vector) to accepting any contiguous view (std::span), and updates the loop style. There is no change to security logic, no bug fix, and no behavior change visible to users or attackers.

Lower-priorityrefactor: Compute work from headers without CBlockIndexby Daniela Brozzoni · 4066bfe5 · Nov 3, 2025 · 5 filesMessage 85 · StrongInformational 20Details
Commit message · Daniela Brozzoni

refactor: Compute work from headers without CBlockIndex

Avoid the need to construct a CBlockIndex object just to compute work for a header,
when its nBits value suffices for that.

Co-Authored-By: Pieter Wuille <pieter@wuille.net>

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
AI analysis · Informational 20/100

This is a code cleanup change. It makes the way Bitcoin Core calculates 'proof of work' from block headers simpler and slightly more efficient, without changing the actual math or security rules. There is no indication this fixes a vulnerability.

Lower-priorityp2p: Avoid an IsAncestorOfBestHeaderOrTip callby Pieter Wuille · 0bf6139e · Nov 3, 2025 · 1 fileMessage 68 · AdequateInformational 14Details
Commit message · Pieter Wuille

p2p: Avoid an IsAncestorOfBestHeaderOrTip call

Just don't call this function when it won't have any effect.

Note that we can't remove the LookupBlockIndex call, since `last_received_header`
is needed to check if new headers were received (`received_new_header`).

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 14/100

This is a tiny code cleanup in Bitcoin Core's peer-to-peer message handling. It changes how one internal flag is set so that an existing true value is preserved, rather than rechecking a condition that cannot change a false value. There is no security issue visible in the diff.

Lower-priorityvalidation: don't reallocate cache for short-lived CCoinsViewCacheby Lőrinc · 0ac969cd · Nov 2, 2025 · 5 filesMessage 81 · StrongInformational 19Details
Commit message · Lőrinc

validation: don't reallocate cache for short-lived CCoinsViewCache

A few temporary `CCoinsViewCache`'s are destructed right after the `Flush()`, therefore it is not necessary to call `ReallocateCache` to recreate them right before they're killed anyway.

* `Flush()` - retains existing functionality;
* `Flush(/*will_reuse_cache=*/false)` - skips destruction and reallocation of the parent cache since it will soon go out of scope anyway;

For the `will_reuse_cache` parameter we want to see exactly which ones will reallocate memory and which won't - since both can be valid usages.

This change was based on a subset of https://github.com/bitcoin/bitcoin/pull/28945.

Co-authored-by: Martin Ankerl <martin.ankerl@gmail.com>

81/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 19/100

This commit is a small performance optimization for Bitcoin Core. It changes how temporary in-memory data caches are cleaned up after use. Previously, these short-lived caches were always emptied and then immediately re-created, only to be destroyed moments later. The patch adds an option to skip that pointless re-creation step. It is not a security fix and does not change what data is stored or how it is validated.

Security candidatecoins: reduce lookups in dbcache layer propagationby Lőrinc · c8f5e446 · Nov 1, 2025 · 1 fileMessage 91 · StrongInformational 18Details
Commit message · Lőrinc

coins: reduce lookups in dbcache layer propagation

Previously, when the parent coins cache had no entry and the child did, `BatchWrite` performed a find followed by `try_emplace`, which resulted in multiple `SipHash` computations and bucket traversals on the common insert path.

This change uses a single leading `try_emplace` and branches on the returned `inserted` flag.
In the `FRESH && SPENT` case (only exercised by tests), we erase the just-inserted placeholder (which is constant time with no rehash anyway).
Semantics are unchanged for all valid parent/child state combinations.

This change is a minimal version of https://github.com/bitcoin/bitcoin/pull/32128/commits/723c49b63bb10da843fbb6efc6928dca415cc47f and draws simplification ideas https://github.com/bitcoin/bitcoin/pull/30673/commits/ae76ec7bcff0a08a61f294882a71e46d177b009f.

Added TODO versions for related pre-existing issues that should be fixed in follow-ups.

Co-authored-by: Martin Ankerl <martin.ankerl@gmail.com>
Co-authored-by: Andrew Toth <andrewstoth@gmail.com>
Co-authored-by: optout <13562139+optout21@users.noreply.github.com>

91/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
Why it was queued
constant-time or timing behavior
AI analysis · Informational 18/100

This is a small internal performance cleanup in Bitcoin Core's coin cache code. It replaces two hash-map operations with one, reducing CPU work when copying coin data from a child cache into a parent cache. The commit explicitly says behavior is unchanged; no security vulnerability is described or evident in the diff.

Lower-priorityAdd eclipse, partitioning, and fingerprinting note to i2p.mdby da1sychain · e346ecae · Oct 31, 2025 · 2 filesMessage 65 · AdequateInformational 15Details
Commit message · da1sychain

Add eclipse, partitioning, and fingerprinting note to i2p.md

Also introduced a Privacy Recommendations section to docs.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only changes documentation. It adds a new 'Privacy recommendations' section to the I2P guide and slightly rewords an existing note in the Tor guide. The text warns users that running a node on multiple networks at once can help protect the Bitcoin network against certain attacks, but may also allow an adversary to link those identities. There is no code change and no vulnerability being fixed.

Lower-priorityinit: Require explicit -asmap filenameby Ryan Ofsky · f6ec3519 · Oct 31, 2025 · 4 filesMessage 76 · AdequateInformational 20Details
Commit message · Ryan Ofsky

init: Require explicit -asmap filename

Currently, if `-asmap` is specified without a filename, bitcoind tries to load
`ip_asn.map` data file.

This change now requires `-asmap=ip_asn.map` or another filename to be
specified explicitly.

The change is intended to make behavior of the option explicit avoid confusion
reported https://github.com/bitcoin/bitcoin/issues/33386 where documentation
specifies a default file which is not actually loaded by default. It was
originally implemented in
https://github.com/bitcoin/bitcoin/pull/33631#issuecomment-3410302383 and
various alternatives are discussed there.

Co-authored-by: Fabian Jahr <fjahr@protonmail.com>

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 20/100

This change tightens how Bitcoin Core handles the -asmap command-line option. Previously, starting the node with just -asmap (no filename) would silently try to load a file named ip_asn.map from the data directory. Now the user must explicitly provide a filename such as -asmap=ip_asn.map, otherwise the node refuses to start with a clear error. This is a behavior-hardening and documentation-clarity fix, not a patch for an active security vulnerability.

Lower-prioritytest: Format strings in `*.rs`by rustaceanrob · 78d4d367 · Oct 31, 2025 · 3 filesMessage 90 · StrongInformational 15Details
Commit message · rustaceanrob

test: Format strings in `*.rs`

`format!` strings may contain variables within the string
representation. This is a lint as of a recent `rustc` nightly version.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only reformats Rust 'format!' strings to use a newer, shorter style supported by recent Rust compiler versions. It changes how variables are inserted into strings, not what the strings do. There is no security impact.

Lower-priorityci: gha: Set debug_pull_request_number_str annotationby MarcoFalke · fa9d0f99 · Oct 31, 2025 · 1 fileMessage 62 · AdequateInformational 15Details
Commit message · MarcoFalke

ci: gha: Set debug_pull_request_number_str annotation

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit adds a harmless debug annotation to Bitcoin Core's GitHub Actions CI workflow. It prints the pull request number as a machine-readable notice during CI runs, which helps link check runs back to their pull requests. There is no security issue here.

Lower-prioritytest: clarify submitBlock() mutates the templateby Sjors Provoost · 6eaa00fe · Oct 31, 2025 · 1 fileMessage 98 · StrongInformational 15Details
Commit message · Sjors Provoost

test: clarify submitBlock() mutates the template

PR #33374 proposed a new Mining IPC method applySolution() which
could be used by clients to obtain the reconstructed block for
inspection, especially in the case of a rejected block.

However it was pointed out during review that submitBlock() modified
the template CBlock in place, so the client can just call getBlock()
and no new method is needed.

This commit adds a test to document that (now intentional) behavior.

98/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This is a harmless test-only change. It adds a new test case to make sure developers know that a mining interface function called submitBlock() changes the block template even when the submitted block is rejected. There is no security fix or vulnerability here.