BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2902 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

254security candidates607second-pass queue2881AI analyses
197commits · 30 days
497commits · 60 days
1518commits · 180 days
2876commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
939Strong · 80–100
1188Adequate · 60–79
687Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow15750157064
MarcoFalke41021406074
Lőrinc17721177081
fanquake22719226057
Hennadii Stepanov20914208063
rkrux57957074
Sjors Provoost89889074
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Hodlinator66566076
Analysis record

Published AI watches

Last scanned 47 minutes ago

Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable misc-definitions-in-headers

This commit is a code cleanup: it turns on a clang-tidy style check called 'misc-definitions-in-headers' and suppresses that check around a large inline implementation block in a benchmark header. There is no change to Bitcoin's runtime be…

fa93132dby MarcoFalke+3−02 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable clang-tidy rule to reject anon namespace in header

This commit only changes a linting configuration file for the project's code style checker. It enables a rule that prevents anonymous namespaces from being used in header files, which is a code-quality and build-hygiene practice. There is …

No security-relevant signals in the diff or commit message.Change is purely a static-analysis/linting configuration update.
fa5ca877by MarcoFalke+2−11 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Use C++20 std::identity over IntIdentity

This commit is a straightforward code cleanup: it replaces a small custom helper named IntIdentity with the standard C++20 std::identity from the <functional> header. The behavior of the ConvertBits function is unchanged; only the implemen…

fafe5042by MarcoFalke+4−111 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test the result order of a multiple import request is correct

This commit only adds a new automated test to Bitcoin Core. It checks that when a user asks the wallet to import multiple descriptors at once, the list of results comes back in the same order as the original request, including any error me…

3ac8b806by Pol Espinasa+40−01 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test invalid or missing timestamp throws importdescriptors

This commit only adds new automated tests for the Bitcoin Core wallet's importdescriptors RPC. It checks that the command correctly rejects requests with a missing or invalid timestamp. No production wallet code is changed, so this cannot …

No changes to consensus, networking, wallet logic, or cryptographyOnly functional test code is modifiedAdded assertions are for expected error handling paths
e4732bf0by Pol Espinasa+28−11 file
No security note in commit
Informational 15 AI analysisMessage 80 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Remove unused #include in common/system

This is a minor code cleanup that removes one unused header file include and swaps another for a more specific one. It does not change any program behavior or fix any security issue.

fa7304f3by MarcoFalke+1−22 files
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

iwyu: Fix warnings in `src/consensus` and treat them as errors

This commit is a routine code cleanup: it adjusts which C++ header files are included in several consensus-related source files and turns on a stricter compiler hygiene check (Include What You Use, or IWYU) for the src/consensus directory.…

13b53f8bby Hennadii Stepanov+42−79 files
No security note in commit
Informational 15 AI analysisMessage 55 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

fuzz: don't connman.ReceiveMsgFrom oversized msg

This is a small fix to a Bitcoin Core fuzz test (an automated internal testing harness), not to the live network code. The fuzzer was sometimes creating fake P2P messages larger than the real protocol allows and passing them into a test he…

Test-only fuzz harness hardeningOversized message guard added before ReceiveMsgFrom() in fuzz targetNo change to production P2P message acceptance logic
bb19f1daby Greg Sanders+5−01 file
No security note in commit
Informational 15 AI analysisMessage 97 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: Temporarily remove riscv32 config from GHA matrix

This commit simply removes one failing test configuration (RISC-V 32-bit bare metal) from the project's GitHub Actions CI matrix because it was failing. It is a routine CI maintenance change with no security implications.

fa06ea42by MarcoFalke+0−61 file
No security note in commit
Low 47 AI analysisMessage 90 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: verify cross-build SDK archives

This change adds checksum verification to the build system's downloads of Apple, FreeBSD, NetBSD, and OpenBSD software development kits (SDKs). Before this patch, those SDK archives were downloaded at build time and extracted without confi…

Adds cryptographic digest verification for downloaded SDK archivesRemoves unchecked extraction of remote SDK archives in CIHardens CI supply chain for macOS/BSD cross-builds
873550beby Lőrinc+25−126 files
Vendor flagged security relevance
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritybuild: add kernel-specific warningsby Cory Fields · 24c3b470 · Feb 13, 2026 · 1 fileMessage 80 · StrongInformational 13Details
Commit message · Cory Fields

build: add kernel-specific warnings

In some cases, we'll want to be more aggressive or care about different things
when building the kernel. In this case, a warning is added for symbols which
may be duplicated between the kernel and downstream users.

This warning was introduced in clang 21, which is not yet the minimum
supported compiler version. REDUCE_EXPORTS needs to be ON to trigger it.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
documentation-only discount
AI analysis · Informational 13/100

This change only adjusts compiler warning settings for the Bitcoin Core kernel build. It adds a new warning flag for newer Clang compilers to detect duplicated symbols between the kernel library and downstream users. There is no functional code change, no bug fix, and no security vulnerability being addressed.

Lower-prioritycoins: add PeekCoin()by Andrew Toth · 69b01af0 · Feb 13, 2026 · 4 filesMessage 63 · AdequateInformational 19Details
Commit message · Andrew Toth

coins: add PeekCoin()

Introduce a helper to look up a Coin through a stack of CCoinsViewCache layers without populating parent caches.

This is useful for ephemeral views (e.g. during ConnectBlock) that want to avoid polluting CoinsTip() when validating invalid blocks.

Co-authored-by: l0rinc <pap.lorinc@gmail.com>
Co-authored-by: Pieter Wuille <pieter@wuille.net>
Co-authored-by: Ryan Ofsky <ryan@ofsky.org>

63/100 · AdequateMessage clarity
✓ Subject identifies a change✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 19/100

This commit adds a new read-only helper called PeekCoin() to Bitcoin Core's coin-cache system. Unlike the existing GetCoin(), PeekCoin() looks up a coin through layers of cache without writing the result into parent caches. The stated purpose is to avoid polluting the main UTXO cache when validating blocks that might turn out to be invalid. It is a defensive, non-breaking code-quality change with no direct vulnerability fix described.

Lower-prioritycoins: don't mutate main cache when connecting blockby Andrew Toth · 73e99a59 · Feb 13, 2026 · 3 filesMessage 83 · StrongModerate 61Details
Commit message · Andrew Toth

coins: don't mutate main cache when connecting block

Use `CoinsViewOverlay` when connecting blocks in `ConnectTip`.

Add a new integration test to verify that using
CoinsViewOverlay does not mutate the main cache
during validation for an invalid block.

Co-authored-by: l0rinc <pap.lorinc@gmail.com>

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Moderate 61/100

This Bitcoin Core change fixes how the coin cache behaves when a new block fails validation. Previously, the same cache used for the main chain was temporarily used during block validation, which could leave behind entries from invalid blocks. Now a separate overlay view is used, so failed blocks don't pollute the main cache. The commit adds a test proving that an invalid block no longer leaves its inputs in the cache. This is a correctness and denial-of-service hardening fix rather than a direct theft bug.

Lower-priorityfuzz: move backend mutating block to end of coins_viewby Andrew Toth · 86eda88c · Feb 13, 2026 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · Andrew Toth

fuzz: move backend mutating block to end of coins_view

Refactor TestCoinsView() to move code that directly modifies
backend_coins_view to the end of the function.
This prepares for a CoinsViewOverlay fuzz target that asserts
the backend_coins_view is not mutated by any methods before
BatchWrite is called.

Co-authored-by: l0rinc <pap.lorinc@gmail.com>

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit is a test-only code cleanup. It moves a block of verification code from the middle to the end of a fuzz-testing function so that a future test can check that the underlying coin database is not modified before a specific write operation. No production code, network behavior, or wallet logic is changed, and there is no security fix.

Lower-prioritycoins: introduce CoinsViewOverlayby Andrew Toth · 67c0d179 · Feb 13, 2026 · 5 filesMessage 58 · ThinInformational 24Details
Commit message · Andrew Toth

coins: introduce CoinsViewOverlay

Introduce `CoinsViewOverlay`, a `CCoinsViewCache` subclass that reads
coins without mutating the underlying cache via `FetchCoin()`.

Use `PeekCoin()` to look up a Coin through a stack of `CCoinsViewCache` layers without populating parent caches. This prevents the main cache from caching inputs pulled from disk for a block that has not yet been fully validated. Once `Flush()` is called on the view, these inputs will be added as spent to `coinsCache` in the main cache via `BatchWrite()`.

This is the foundation for async input fetching, where worker threads must not
mutate shared state.

Co-authored-by: l0rinc <pap.lorinc@gmail.com>

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
Why it was queued
defensive validation
AI analysis · Informational 24/100

This commit adds a new read-only overlay for Bitcoin Core's coin cache system. It lets the software look up transaction inputs during block validation without writing those lookups into the main in-memory cache. The goal is to avoid polluting the cache with data from blocks that might turn out to be invalid, and to prepare for future multi-threaded input fetching where worker threads should not change shared state. The change itself is defensive infrastructure, not a fix for an active bug or vulnerability.

Lower-priorityfuzz: add target for CoinsViewOverlayby Andrew Toth · cae6d895 · Feb 13, 2026 · 1 fileMessage 70 · AdequateInformational 15Details
Commit message · Andrew Toth

fuzz: add target for CoinsViewOverlay

Co-authored-by: l0rinc <pap.lorinc@gmail.com>

70/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Mentions testing or verification
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit adds a new automated fuzz test for a Bitcoin Core component called CoinsViewOverlay. Fuzz tests feed random or semi-random inputs to code to catch bugs early. The change only touches test code and does not alter the behavior of the main Bitcoin node software. There is no indication it fixes a live security issue or introduces a vulnerability.

Lower-priorityfuzz: pass coins_view_cache to TestCoinsView in coins_viewby Andrew Toth · 89824fb2 · Feb 13, 2026 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · Andrew Toth

fuzz: pass coins_view_cache to TestCoinsView in coins_view

Refactor TestCoinsView() to accept the cache as a parameter instead of
creating it internally. This prepares for adding a CoinsViewOverlay
fuzz target that needs to pass in a different cache type.

This is a non-functional change.

Co-authored-by: l0rinc <pap.lorinc@gmail.com>

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit is a minor code cleanup in Bitcoin Core's internal fuzz testing code. It changes how a test helper function receives a temporary data cache, moving the cache creation from inside the helper to the callers. The commit message explicitly calls this a non-functional change, and the diff shows only a straightforward parameter refactor with no logic changes to how Bitcoin handles transactions, networking, or wallets.

Lower-prioritydoc: Release notes for mining IPC interface bumpby Ryan Ofsky · f700609e · Feb 12, 2026 · 2 filesMessage 45 · ThinInformational 15Details
Commit message · Ryan Ofsky

doc: Release notes for mining IPC interface bump

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only updates release note documentation for an upcoming Bitcoin Core release. It deletes one release-notes file and adds another describing changes to the mining IPC (inter-process communication) interface. There are no code changes, no bug fixes, and no security-sensitive behavior altered in the commit itself.

Lower-prioritycmake: Fix NetBSD-specific workaround for Boostby Hennadii Stepanov · 79c934b5 · Feb 12, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Hennadii Stepanov

cmake: Fix NetBSD-specific workaround for Boost

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This is a small build-system fix for Bitcoin Core on NetBSD. It narrows an existing workaround so it only applies when Boost is installed under /usr/pkg (the standard NetBSD pkgsrc location). Previously, the workaround could set incorrect include paths on NetBSD systems where Boost was installed elsewhere, potentially breaking compilation. There is no indication this affects runtime security or allows attacks.

Lower-prioritytest: Fix intermittent issues in feature_assumevalid.pyby MarcoFalke · fa90d44a · Feb 12, 2026 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · MarcoFalke

test: Fix intermittent issues in feature_assumevalid.py

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit fixes timing-related flakiness in a single Bitcoin Core functional test file. It does not change any production node code, network rules, or wallet behavior. There is no security issue in the software itself—only a more reliable way of running an existing test.

Lower-priorityipc mining: break compatibility with existing clients (version bump)by Sjors Provoost · 9453c153 · Feb 12, 2026 · 3 filesMessage 73 · AdequateInformational 19Details
Commit message · Sjors Provoost

ipc mining: break compatibility with existing clients (version bump)

This increments the field number of the `Init.makeMining` method and makes the
old `makeMining` method return an error, so existing IPC mining clients not
using the latest schema file will get an error and not be able to access the
Mining interface.

Normally, there shouldn't be a need to break compatibility this way, but the
mining interface has evolved a lot since it was first introduced, with old
clients using the original methods less stable and performant than newer
clients. So now is a good time to introduce a cutoff, drop deprecated methods,
and stop supporting old clients which can't function as well.

Bumping the field number is also an opportunity to make other improvements that
would be awkward to implement compatibly, so a few of these were implemented in
commits immediately preceding this one.

Co-authored-by: Ryan Ofsky <ryan@ofsky.org>

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 19/100

This is a planned compatibility break for an experimental inter-process communication (IPC) mining feature in Bitcoin Core. The developers moved the current mining method to a new slot and made the old slot return a clear error message, so outdated clients can no longer connect. It is not a security vulnerability; it is an intentional API cleanup with a test that verifies the old interface now fails gracefully.

Lower-priorityipc mining: declare constants for default field valuesby Ryan Ofsky · a4603ac7 · Feb 12, 2026 · 4 filesMessage 73 · AdequateInformational 15Details
Commit message · Ryan Ofsky

ipc mining: declare constants for default field values

This commit only declares constants without using them. They will be applied in
seperate commit since changing struct default field values in cap'n proto is
not backwards compatible.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a small, non-functional refactor. It declares new named constants for default values used in Bitcoin's mining inter-process communication (IPC) protocol and block template creation, and adds compile-time checks that those constants match existing values. No behavior changes; no security issue.

Lower-priorityipc test: add workaround to block_reserved_weight exception testby Ryan Ofsky · ff995b50 · Feb 12, 2026 · 1 fileMessage 91 · StrongInformational 16Details
Commit message · Ryan Ofsky

ipc test: add workaround to block_reserved_weight exception test

libmultiprocess currently handles uncaught exceptions from IPC methods badly
when an `mp.Context` parameter is passed and the IPC call executes on an a
worker thread, with the uncaught exception leading to a std::terminate call.

https://github.com/bitcoin-core/libmultiprocess/pull/218 was created to fix
this, but before that change is available, update an IPC test which can trigger
this behavior to handle it and recover when mp.Context parameters are added in
the an upcoming commit.

Having this workaround makes the test a little more complicated and less strict
but reduces dependencies between pending PRs so they don't need to be reviewed
or merged in a particular order.

91/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 16/100

This is a test-only change in Bitcoin Core. It adds a temporary workaround in an automated test so the test can keep running even when a known bug in a supporting library (libmultiprocess) causes the tested program to crash. The change does not alter normal Bitcoin node behavior, wallet handling, consensus rules, or network protocol handling, so it is not a security vulnerability in Bitcoin Core itself.

Lower-priorityipc mining: pass missing context to BlockTemplate methods (incompatible schema change)by Sjors Provoost · 70de5cc2 · Feb 12, 2026 · 3 filesMessage 93 · StrongLow 25Details
Commit message · Sjors Provoost

ipc mining: pass missing context to BlockTemplate methods (incompatible schema change)

Adding a context parameter ensures that these methods are run in
their own thread and don't block other calls. They were missing
for:

- createNewBlock()
- checkBlock()

The missing parameters were first pointed out by plebhash in
https://github.com/bitcoin/bitcoin/issues/33575#issuecomment-3383290115 and
adding them should prevent possible performance problems and lockups,
especially with #34184 which can make the createNewBlock method block for a
long time before returning. It would be straightforward to make this change in
a backward compatible way
(https://github.com/bitcoin/bitcoin/pull/34184#discussion_r2770232149) but nice
to not need to go through the trouble.

Warning: This is an intermediate, review-only commit. Binaries built from it
should not be distributed or used to connect to other clients or servers. It
makes incompatible changes to the `mining.capnp` schema without updating the
`Init.makeMining` version, causing binaries to advertise support for a schema
they do not actually implement. Mixed versions may therefore exchange garbage
requests/responses instead of producing clear errors. The final commit in this
series bumps the mining interface number to ensure mismatches are detected.

git-bisect-skip: yes

Co-authored-by: Ryan Ofsky <ryan@ofsky.org>

93/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Links an issue, advisory, or supporting reference
AI analysis · Low 25/100

This is a Bitcoin Core internal-only commit that changes the inter-process communication (IPC) schema used between the main node and external mining components. It adds a missing 'context' parameter to two mining methods so they run in their own thread and don't block other calls. The commit itself explicitly warns it is an intermediate, review-only change that should not be distributed, because it makes incompatible schema changes without bumping the version number, which could cause mismatched binaries to exchange garbage data instead of clean errors. The actual security risk is low and self-contained: it is a known, temporary incompatibility during development, not a vulnerability in shipped code.

Lower-priorityrpc refactor: stop using deprecated getCoinbaseCommitment methodby Ryan Ofsky · df53a3e5 · Feb 12, 2026 · 1 fileMessage 65 · AdequateInformational 13Details
Commit message · Ryan Ofsky

rpc refactor: stop using deprecated getCoinbaseCommitment method

There should be no change in behavior

Co-authored-by: Sjors Provoost <sjors@sprovoost.nl>

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 13/100

This is a small internal code cleanup in Bitcoin Core's mining RPC. It replaces a deprecated helper method with a direct read of the coinbase transaction data. The commit message explicitly says there should be no change in behavior, and the diff shows equivalent logic: it still returns the same witness commitment value under the same JSON key when present.

Lower-priorityipc mining: provide default option values (incompatible schema change)by Ryan Ofsky · c6638fa7 · Feb 12, 2026 · 2 filesMessage 85 · StrongInformational 19Details
Commit message · Ryan Ofsky

ipc mining: provide default option values (incompatible schema change)

This change copies default option values from the C++ mining interface to the
Cap'n Proto interface. Currently, no capnp default values are set, so they are
implicitly all false or 0, which is inconvenient for the rust and python
clients and inconsistent with the C++ client.

Warning: This is an intermediate, review-only commit. Binaries built from it
should not be distributed or used to connect to other clients or servers. It
makes incompatible changes to the `mining.capnp` schema without updating the
`Init.makeMining` version, causing binaries to advertise support for a schema
they do not actually implement. Mixed versions may therefore exchange garbage
requests/responses instead of producing clear errors. The final commit in this
series bumps the mining interface number to ensure mismatches are detected.

git-bisect-skip: yes

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 19/100

This is a Bitcoin Core internal commit that adds default values to an inter-process communication (IPC) schema used by experimental mining interfaces. The commit itself warns it is an intermediate, review-only change that should not be used in production because it makes an incompatible schema change without bumping the version number. If someone ignored that warning and ran mismatched binaries, the two sides could misunderstand each other's messages and exchange garbage data instead of clean errors. There is no direct evidence this is exploitable as a security vulnerability; the risk is primarily operational and self-disclosed by the developers.

Lower-priorityipc mining: remove deprecated methods (incompatible schema change)by Ryan Ofsky · 2278f017 · Feb 12, 2026 · 9 filesMessage 85 · StrongInformational 21Details
Commit message · Ryan Ofsky

ipc mining: remove deprecated methods (incompatible schema change)

This change removes deprecated methods from the ipc mining interface.

Warning: This is an intermediate, review-only commit. Binaries built from it
should not be distributed or used to connect to other clients or servers. It
makes incompatible changes to the `mining.capnp` schema without updating the
`Init.makeMining` version, causing binaries to advertise support for a schema
they do not actually implement. Mixed versions may therefore exchange garbage
requests/responses instead of producing clear errors. The final commit in this
series bumps the mining interface number to ensure mismatches are detected.

git-bisect-skip: yes

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 21/100

This is a Bitcoin Core internal cleanup commit that removes old, deprecated methods from the inter-process communication (IPC) mining interface. The commit itself is explicitly marked as an incomplete, review-only change that should not be used in production. The main risk is that, because the interface version number was not bumped in this intermediate commit, two differently-versioned programs could talk to each other using mismatched method numbers and exchange meaningless data instead of getting a clean error. That mismatch is a protocol-handling bug, not a cryptographic or funds-theft vulnerability, and the commit message says the next commit in the series will fix it by bumping the version.

Lower-prioritytest framework: expand expected_stderr, expected_ret_code optionsby Ryan Ofsky · b970cdf2 · Feb 12, 2026 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · Ryan Ofsky

test framework: expand expected_stderr, expected_ret_code options

Allow `expected_stderr` option passed to `wait_until_stopped` and
`is_node_stopped` helper functions to be a regex pattern instead of just a
fixed string.

Allow `expected_ret_code` be list of possible exit codes instead of a single
error code to handle the case where exit codes vary depending on OS and libc.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit changes Bitcoin Core's internal testing helper code. It makes two test-only quality-of-life improvements: an expected error message can now be a regular expression pattern instead of only a fixed string, and an expected program exit code can now be a list of acceptable values instead of a single value. These changes only affect how tests validate results; they do not change the behavior of the Bitcoin Core software that users run.

Lower-prioritytest: Cover abortprivatebroadcast in p2p_private_broadcastby Andrew Toth · c3378be1 · Feb 12, 2026 · 1 fileMessage 87 · StrongInformational 15Details
Commit message · Andrew Toth

test: Cover abortprivatebroadcast in p2p_private_broadcast

Co-authored-by: l0rinc <pap.lorinc@gmail.com>

87/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only adds new test code to Bitcoin Core. It does not change any production wallet, networking, or consensus code. The test verifies that a new RPC command, abortprivatebroadcast, correctly removes a transaction from the private-broadcast queue and returns an error for a non-existent transaction. There is no security-relevant change to end-user behavior.

Lower-prioritydoc: Mention private broadcast RPCs in release notesby Andrew Toth · 2a1d0db7 · Feb 12, 2026 · 1 fileMessage 50 · ThinInformational 15Details
Commit message · Andrew Toth

doc: Mention private broadcast RPCs in release notes

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit is a documentation-only update to the release notes. It simply tells users about two new commands (RPCs) that let them check or stop private transaction broadcasts. No code behavior changed, and there is no security issue in the commit itself.

Lower-priorityrpc: Add abortprivatebroadcastby Andrew Toth · 557260ca · Feb 12, 2026 · 4 filesMessage 50 · ThinInformational 23Details
Commit message · Andrew Toth

rpc: Add abortprivatebroadcast

Co-authored-by: l0rinc <pap.lorinc@gmail.com>

50/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides an explanatory body
AI analysis · Informational 23/100

This commit adds a new Bitcoin Core RPC command called abortprivatebroadcast. It lets a node operator stop a transaction that is currently being sent out privately (a privacy feature) and remove it from the outgoing queue. The change is purely additive: it exposes a way to cancel an in-progress private broadcast, but does not by itself create or fix a security vulnerability. It is a user-facing control feature, not a security patch.

Lower-prioritytest: Cover getprivatebroadcastinfo in p2p_private_broadcastby Andrew Toth · 15dff452 · Feb 12, 2026 · 1 fileMessage 87 · StrongInformational 15Details
Commit message · Andrew Toth

test: Cover getprivatebroadcastinfo in p2p_private_broadcast

Co-authored-by: l0rinc <pap.lorinc@gmail.com>

87/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only adds new test code to Bitcoin Core. It extends an existing functional test to check that an RPC command called getprivatebroadcastinfo correctly reports private transaction broadcasts. There is no change to production code, no bug fix, and no security-relevant behavior change.

Lower-priorityrpc: Add getprivatebroadcastinfoby Andrew Toth · 996f20c1 · Feb 12, 2026 · 4 filesMessage 50 · ThinInformational 18Details
Commit message · Andrew Toth

rpc: Add getprivatebroadcastinfo

Co-authored-by: Vasil Dimov <vd@freebsd.org>

50/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides an explanatory body
AI analysis · Informational 18/100

This commit adds a new read-only RPC command called getprivatebroadcastinfo to Bitcoin Core. It lets users inspect transactions currently being broadcast privately, including their IDs, raw data, and which peers they were sent to and when. There is no code change that modifies how transactions are broadcast or how peers are chosen; it only exposes existing internal state through the RPC interface.

Lower-prioritynet: Add PrivateBroadcast::GetBroadcastInfoby Andrew Toth · 5e649825 · Feb 12, 2026 · 3 filesMessage 50 · ThinInformational 15Details
Commit message · Andrew Toth

net: Add PrivateBroadcast::GetBroadcastInfo

Co-authored-by: Daniela Brozzoni <danielabrozzoni@protonmail.com>
Co-authored-by: l0rinc <pap.lorinc@gmail.com>

50/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit adds a new read-only method, GetBroadcastInfo(), to Bitcoin Core's PrivateBroadcast class. It simply returns statistics about which transactions are being privately broadcast and to which peers. There is no change to network behavior, no new permissions, and no bug fix. It is a routine code addition with no security relevance.

AI review queued[doc] coin selection filters by max cluster count, not descendantby glozow · a067ca34 · Feb 11, 2026 · 7 filesMessage 73 · AdequateInformational 15Details
Commit message · glozow

[doc] coin selection filters by max cluster count, not descendant

Avoid confusion by clarifying the docs and renaming the variables that
now hold cluster count rather than descendant count. No behavior change.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit only renames variables and updates comments in Bitcoin Core's coin selection code. It changes names like 'descendants' to 'cluster_count' to make the code match what it actually does, with no change in behavior. There is no security issue here.