BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2906 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

255security candidates607second-pass queue2882AI analyses
194commits · 30 days
483commits · 60 days
1504commits · 180 days
2879commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
942Strong · 80–100
1188Adequate · 60–79
688Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow15750157064
MarcoFalke41021406074
Lőrinc17721177081
fanquake22819226057
Hennadii Stepanov21014208063
rkrux57957074
Sjors Provoost89889074
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Hodlinator66566076
Analysis record

Published AI watches

Last scanned 42 minutes ago

Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35937: test: Append print_suppressions=0 to LSAN_OPTIONS, and suppress bitcoin-qt

This commit only changes test configuration. It tells the LeakSanitizer tool used during automated testing to stop printing long lists of suppressed memory leaks, and it narrows the list of ignored leaks to the bitcoin-qt GUI test binary. …

5973e075by merge-script+3−42 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable misc-definitions-in-headers

This commit is a code cleanup: it turns on a clang-tidy style check called 'misc-definitions-in-headers' and suppresses that check around a large inline implementation block in a benchmark header. There is no change to Bitcoin's runtime be…

fa93132dby MarcoFalke+3−02 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable clang-tidy rule to reject anon namespace in header

This commit only changes a linting configuration file for the project's code style checker. It enables a rule that prevents anonymous namespaces from being used in header files, which is a code-quality and build-hygiene practice. There is …

No security-relevant signals in the diff or commit message.Change is purely a static-analysis/linting configuration update.
fa5ca877by MarcoFalke+2−11 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Use C++20 std::identity over IntIdentity

This commit is a straightforward code cleanup: it replaces a small custom helper named IntIdentity with the standard C++20 std::identity from the <functional> header. The behavior of the ConvertBits function is unchanged; only the implemen…

fafe5042by MarcoFalke+4−111 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test the result order of a multiple import request is correct

This commit only adds a new automated test to Bitcoin Core. It checks that when a user asks the wallet to import multiple descriptors at once, the list of results comes back in the same order as the original request, including any error me…

3ac8b806by Pol Espinasa+40−01 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test invalid or missing timestamp throws importdescriptors

This commit only adds new automated tests for the Bitcoin Core wallet's importdescriptors RPC. It checks that the command correctly rejects requests with a missing or invalid timestamp. No production wallet code is changed, so this cannot …

No changes to consensus, networking, wallet logic, or cryptographyOnly functional test code is modifiedAdded assertions are for expected error handling paths
e4732bf0by Pol Espinasa+28−11 file
No security note in commit
Informational 15 AI analysisMessage 80 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Remove unused #include in common/system

This is a minor code cleanup that removes one unused header file include and swaps another for a more specific one. It does not change any program behavior or fix any security issue.

fa7304f3by MarcoFalke+1−22 files
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

iwyu: Fix warnings in `src/consensus` and treat them as errors

This commit is a routine code cleanup: it adjusts which C++ header files are included in several consensus-related source files and turns on a stricter compiler hygiene check (Include What You Use, or IWYU) for the src/consensus directory.…

13b53f8bby Hennadii Stepanov+42−79 files
No security note in commit
Informational 15 AI analysisMessage 55 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

fuzz: don't connman.ReceiveMsgFrom oversized msg

This is a small fix to a Bitcoin Core fuzz test (an automated internal testing harness), not to the live network code. The fuzzer was sometimes creating fake P2P messages larger than the real protocol allows and passing them into a test he…

Test-only fuzz harness hardeningOversized message guard added before ReceiveMsgFrom() in fuzz targetNo change to production P2P message acceptance logic
bb19f1daby Greg Sanders+5−01 file
No security note in commit
Informational 15 AI analysisMessage 97 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: Temporarily remove riscv32 config from GHA matrix

This commit simply removes one failing test configuration (RISC-V 32-bit bare metal) from the project's GitHub Actions CI matrix because it was failing. It is a routine CI maintenance change with no security implications.

fa06ea42by MarcoFalke+0−61 file
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-priority kernel: Add Handle/View pattern for BlockValidationStateby yuvicc · b851ff6c · Jan 21, 2026 · 5 filesMessage 73 · AdequateInformational 15Details
Commit message · yuvicc

kernel: Add Handle/View pattern for BlockValidationState

Add C API functions for managing BlockValidationState lifecycle:
- btck_block_validation_state_create()
- btck_block_validation_state_copy()
- btck_block_validation_state_destroy()

Introduce BlockValidationStateApi<> template to share common getter methods between BlockValidationState (Handle) and BlockValidationStateView (View) classes in the C++ wrapper. This enables external code to create and own BlockValidationState objects needed for the new process_block_header() API.

Co-authored-by: TheCharlatan <seb.kung@gmail.com>

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a routine internal API refactor for Bitcoin Core's experimental libbitcoinkernel C API. It adds create/copy/destroy functions for a block-validation state object and splits a C++ wrapper class into a read-only 'View' and an owning 'Handle'. There is no security fix, no bug fix, and no externally reported issue. It simply lets outside code allocate and own these state objects.

Lower-prioritydoc: Fix wrong code in WITH_LOCK doxygen commentby MarcoFalke · fa61fada · Jan 21, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · MarcoFalke

doc: Fix wrong code in WITH_LOCK doxygen comment

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only fixes a typo in a documentation comment. The code examples inside the comment had an extra 'return {' that made them syntactically invalid. No actual program code was changed, so there is no security effect.

Lower-prioritytest: switch order of error code and message checkby rkrux · 0aba464c · Jan 21, 2026 · 1 fileMessage 95 · StrongInformational 15Details
Commit message · rkrux

test: switch order of error code and message check

I feel it'd be easier to debug intermittent test failures if the
error message is present in the logs instead of error code. So,
switching order of error code and message in the `try_rpc` function
to aid error debugging.

95/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only changes the order of two checks inside a Bitcoin Core test helper. It makes no functional change to the Bitcoin software itself, does not affect live code, and has no security relevance. The change is intended to make debugging test failures easier by showing the error message before the error code in failure logs.

Lower-prioritytest: remove child_one/child_two (w)txid variablesby naiyoma · 3f5211cb · Jan 21, 2026 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · naiyoma

test: remove child_one/child_two (w)txid variables

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This is a minor cleanup of a single test file. It removes four temporary variables that stored transaction IDs and replaces their uses with direct property access. There is no change to Bitcoin Core's actual network or wallet behavior, and no security relevance.

Lower-prioritytest: replace ValidWitnessMalleatedTx class with functionby naiyoma · 7cfe7908 · Jan 21, 2026 · 3 filesMessage 95 · StrongInformational 15Details
Commit message · naiyoma

test: replace ValidWitnessMalleatedTx class with function

Simplify the witness malleation test helper by converting the
ValidWitnessMalleatedTx class to a standalone function
build_malleated_tx_package() and updating call sites.

Co-authored-by: rkrux <rkrux.connect@gmail.com>

95/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit is a routine cleanup of Bitcoin Core's test code. It replaces a small helper class used to create test transactions with a standalone function and updates the tests that use it. There is no change to the live Bitcoin network code, no fix for a security bug, and no new security feature.

Security candidatetest: clean up tx resurrection (re-org) test in feature_block.pyby Sebastian Falbesoner · 5b2c3960 · Jan 21, 2026 · 1 fileMessage 100 · StrongInformational 15Details
Commit message · Sebastian Falbesoner

test: clean up tx resurrection (re-org) test in feature_block.py

This comment about ECDSA signatures created with the test framework not
passing mempool policy has been obsolete for a long time (at least since
2019, see PR #15826), so remove it. While at it, change the resurrected
txs to be indeed standard valid, so the `-acceptnonstdtxn=1` parameter
can also be removed.

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
Why it was queued
signing boundary
AI analysis · Informational 15/100

This is a cleanup change to one of Bitcoin Core's own automated tests. It removes an outdated comment about signature quirks and adjusts the test transactions so they follow normal network rules, allowing a special 'accept non-standard transactions' flag to be removed. It does not change any production code that runs on real Bitcoin nodes, so it has no direct security impact on the network or users.

Lower-priorityrefactor: Simplify Interpret asmap functionby Fabian Jahr · 4fec726c · Jan 20, 2026 · 3 filesMessage 80 · StrongInformational 15Details
Commit message · Fabian Jahr

refactor: Simplify Interpret asmap function

This aligns it more with SanityCheckAsmap and reduces variable scope.

Also unify asmap casing in SanityCheckAsmap function name.

Co-authored-by: Hodlinator <172445034+hodlinator@users.noreply.github.com>

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a small code cleanup (refactor) in Bitcoin Core's asmap handling. It renames a function to use consistent capitalization and moves variable declarations closer to where they are used. There is no change to behavior, no bug fix, and no security-relevant change.

Lower-prioritydoc: Add more extensive docs to asmap implementationby Fabian Jahr · 79e97d45 · Jan 20, 2026 · 2 filesMessage 65 · AdequateInformational 15Details
Commit message · Fabian Jahr

doc: Add more extensive docs to asmap implementation

Also makes minor improvement on the python implementation documentation.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit only adds plain-language comments and documentation to existing code. It does not change how the program behaves, does not fix any bug, and does not alter any logic that handles user data or network traffic. There is no security relevance.

Lower-priorityrefactor: Use span instead of vector for data in util/asmapby Fabian Jahr · cf4943fd · Jan 20, 2026 · 13 filesMessage 97 · StrongInformational 15Details
Commit message · Fabian Jahr

refactor: Use span instead of vector for data in util/asmap

This prevents holding the asmap data in memory twice.

The version hash changes due to spans being serialized without their size-prefix (unlike vectors).

97/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This is a code cleanup (refactor) change in Bitcoin Core. It replaces internal use of std::vector with std::span for asmap data so the same data isn't kept in memory twice, and updates the version-hash test value because the serialization format changed slightly. There is no security bug being fixed here.

Lower-priorityrefactor: Unify asmap version calculation and namingby Fabian Jahr · 385c34a0 · Jan 20, 2026 · 6 filesMessage 97 · StrongInformational 15Details
Commit message · Fabian Jahr

refactor: Unify asmap version calculation and naming

Calculate the asmap version only in one place: A dedicated function in util/asmap.

The version was also referred to as asmap checksum in several places. To avoid confusion call it asmap version everywhere.

97/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This is a code cleanup change with no security impact. It moves the calculation of an 'asmap version' (previously called 'asmap checksum') into a single shared helper function and renames all references from 'checksum' to 'version' for consistency. The actual math used to compute the value is unchanged.

Lower-priorityrefactor: Operate on bytes instead of bits in Asmap codeby Fabian Jahr · fa41fc6a · Jan 20, 2026 · 14 filesMessage 77 · AdequateInformational 15Details
Commit message · Fabian Jahr

refactor: Operate on bytes instead of bits in Asmap code

Co-authored-by: Hodlinator <172445034+hodlinator@users.noreply.github.com>

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit is a code cleanup (refactor) in Bitcoin Core's asmap feature. It changes the internal representation of asmap data from a sequence of individual bits (std::vector<bool>) to a sequence of bytes (std::vector<std::byte>). The visible behavior of IP-to-ASN mapping, sanity checks, and file loading is intended to remain the same. There is no security fix or vulnerability indicated in the commit message or diff.

Lower-priorityrefactor(miniscript): Destroy nodes one full subs-vector at a timeby Hodlinator · 198bbaee · Jan 20, 2026 · 1 fileMessage 62 · AdequateInformational 18Details
Commit message · Hodlinator

refactor(miniscript): Destroy nodes one full subs-vector at a time

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 18/100

This commit rewrites how a data structure in Bitcoin Core's Miniscript code is torn down when no longer needed. The change is described as a non-functional refactor to avoid a potential stack overflow during destruction of deeply nested Miniscript expressions. There is no direct evidence in the commit that this fixes an exploitable vulnerability, and the change is not labeled as a security fix by the project.

Lower-priorityrefactor(miniscript): Remove NodeRef & MakeNodeRef()by Hodlinator · 50cab857 · Jan 20, 2026 · 3 filesMessage 85 · StrongInformational 15Details
Commit message · Hodlinator

refactor(miniscript): Remove NodeRef & MakeNodeRef()

(Also removes parameter to TestSatisfy() which existed unused from the start in 22c5b00345063bdeb8b6d3da8b5692d18f92bfb7).

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a code cleanup change in Bitcoin Core's miniscript module. It removes an old type alias called NodeRef and a helper function called MakeNodeRef, replacing them with direct use of the Node type. It also removes an unused parameter from a test function. There is no change to how Bitcoin validates transactions, scripts, or signatures, and no security fix is described.

Lower-priorityrefactor(miniscript): Remove superfluous unique_ptr-indirectionby Hodlinator · 15fb34de · Jan 20, 2026 · 4 filesMessage 85 · StrongInformational 19Details
Commit message · Hodlinator

refactor(miniscript): Remove superfluous unique_ptr-indirection

Functional parity is achieved through making Node move-able.

Unfortunately ~Node() now needs to have the recursion linter disabled, as it is unable to figure out that recursion stops 1 level down. The former smart pointers must have been circumventing the linter somehow.

NodeRef & MakeNodeRef() are deleted in the following commit (broken out to facilitate review).

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
AI analysis · Informational 19/100

This is an internal code cleanup in Bitcoin Core's miniscript module. It replaces pointer-based storage of miniscript nodes with direct object storage, while keeping the same behavior. The change is described by the authors as a pure refactor with no functional changes. There is no indication it fixes a security bug or introduces a new vulnerability, though any large refactor carries a small risk of unintended behavior changes.

Security candidatetest(miniscript): Prove avoidance of stack overflowby Hodlinator · 964c44cd · Jan 20, 2026 · 1 fileMessage 100 · StrongInformational 12Details
Commit message · Hodlinator

test(miniscript): Prove avoidance of stack overflow

Can be tested through emptying the function body of ~Node() or replacing Clone() implementation with naive version:
```C++
Node<Key> Clone() const
{
std::vector<Node> new_subs;
new_subs.reserve(subs.size());
for (const Node& child : subs) {
new_subs.push_back(child.Clone());
}
return Node{internal::NoDupCheck{}, m_script_ctx, fragment, std::move(new_subs), keys, data, k};
}
```

Co-authored-by: Lőrinc <pap.lorinc@gmail.com>

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Names security-relevant behavior explicitly
Why it was queued
memory safety
AI analysis · Informational 12/100

This commit only adds a new automated test to Bitcoin Core. The test builds an extremely deep Miniscript node tree and then exercises its destructor, clone, and move-assignment to confirm they do not overflow the call stack. It is a defensive regression test, not a fix for any currently broken or exploitable behavior.

Lower-priorityrefactor(miniscript): Remove Node::subs mutabilityby Hodlinator · e55b23c1 · Jan 20, 2026 · 2 filesMessage 62 · AdequateInformational 15Details
Commit message · Hodlinator

refactor(miniscript): Remove Node::subs mutability

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This is a small internal cleanup in Bitcoin Core's miniscript code. It removes the 'mutable' keyword from a list of child node pointers and adjusts a related pointer type. There is no user-facing behavior change and no security fix.

Lower-prioritydoc(miniscript): Remove mention of shared pointersby Hodlinator · 22e41153 · Jan 20, 2026 · 1 fileMessage 81 · StrongInformational 15Details
Commit message · Hodlinator

doc(miniscript): Remove mention of shared pointers

Correct destructor implementation comment to no longer refer to shared pointers and also move it into the function body, in symmetry with Clone() right below.

Leftover from #30866.

81/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This is a documentation-only change. A comment above a destructor was rewritten to no longer mention 'shared pointers' and was moved inside the function body. The actual code logic of the destructor did not change at all.

Lower-priorityrefactor(miniscript): Make fields non-const & privateby Hodlinator · c6f798b2 · Jan 20, 2026 · 4 filesMessage 97 · StrongInformational 15Details
Commit message · Hodlinator

refactor(miniscript): Make fields non-const & private

Makes a lot of fields in miniscript.h non-const in order to allow move-operations 2 commits later.

Also fixes adjacent comment typos.

Co-authored-by: Lőrinc <pap.lorinc@gmail.com>
Co-authored-by: MarcoFalke <*~=`'#}+{/-|&$^_@721217.xyz>

97/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit is a straightforward internal code cleanup in Bitcoin Core's miniscript module. It changes several data structures from public structs with directly accessible fields to classes with private fields and public accessor methods, and removes 'const' from some fields so that objects can be moved efficiently in a later commit. There is no change to network rules, wallet behavior, or any user-visible functionality, and nothing in the diff suggests a security fix or vulnerability.

Lower-prioritytest: use IP_PORTRANGE_HIGH on FreeBSD for dynamic port allocationby woltx · 34bed0ed · Jan 20, 2026 · 2 filesMessage 100 · StrongInformational 15Details
Commit message · woltx

test: use IP_PORTRANGE_HIGH on FreeBSD for dynamic port allocation

On FreeBSD, the default ephemeral port range (10000-65535) overlaps
with the test framework's static port range (11000-26000), causing
intermittent "address already in use" failures when tests use dynamic
port allocation (port=0).

Add a helper function that sets the IP_PORTRANGE/IPV6_PORTRANGE socket
option to IP_PORTRANGE_HIGH before binding, which requests ports from
the high range (49152-65535) instead. This range does not overlap with
the test framework's static ports.

Constants from FreeBSD's netinet/in.h and netinet6/in6.h:
- IP_PORTRANGE = 19 (for IPv4 sockets)
- IPV6_PORTRANGE = 14 (for IPv6 sockets)
- IP_PORTRANGE_HIGH = 1

Fixes: bitcoin/bitcoin#34331

Co-Authored-By: Vasil Dimov <vd@FreeBSD.org>
Co-Authored-By: MarcoFalke <*~=\`'#}+{/-|&$^_@721217.xyz>

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This commit fixes a flaky test problem on FreeBSD. When Bitcoin Core's test software asked the operating system for any available network port, FreeBSD could hand back a port number that the test framework already planned to use elsewhere, causing 'address already in use' failures. The change tells FreeBSD to pick ports only from the high-numbered range (49152-65535), which does not overlap with the test framework's reserved ports. It is a test-only reliability improvement, not a security fix.

Lower-prioritydepends: Do not consider `CC` environment variable when detecting systemby Hennadii Stepanov · b149a28f · Jan 20, 2026 · 1 fileMessage 77 · AdequateInformational 16Details
Commit message · Hennadii Stepanov

depends: Do not consider `CC` environment variable when detecting system

Otherwise, the build system fails to detect cross-compiling mode
properly in some cases when `CC` is set.

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Explains rationale or failure mode
AI analysis · Informational 16/100

This is a small build-system fix in Bitcoin Core's dependency builder. It prevents the CC environment variable (which tells a build which C compiler to use) from confusing the script that guesses what platform is being built on. The change makes cross-compilation detection more reliable, but it is not a runtime security fix for Bitcoin nodes or wallets.

Lower-priorityutil: Remove `FilterHeaderHasher`by rustaceanrob · ccf9172a · Jan 20, 2026 · 2 filesMessage 66 · AdequateInformational 17Details
Commit message · rustaceanrob

util: Remove `FilterHeaderHasher`

With respect to `std::unordered_map` documentation, the `Hash` type
defined in the template is over the `Key` and not `T`, the value. This
hasher is incorrectly named as the `FilterHeader` is the value within this map.
I consider this a bug as opposed to a refactor as the key and value
relationship is implied to be `filter header -> block hash` when it is
the opposite.

Further, the hasher for the key already exists via `BlockHasher`.

ref: https://en.cppreference.com/w/cpp/container/unordered_map.html

66/100 · AdequateMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 17/100

This commit removes a redundant and misleadingly-named hash function called FilterHeaderHasher and replaces its single use with an existing, functionally identical BlockHasher. Both hashers do the exact same thing—read the first 8 bytes of a 256-bit value as the hash—so the change has no effect on runtime behavior. The author frames it as a naming/documentation bug because the old name wrongly implied the hasher was for filter-header values, when in fact it hashed block-hash keys. It is essentially a code-cleanup change with no known security impact.

AI review queuedci, iwyu: Fix warnings in `src/primitives` and treat them as errorsby Hennadii Stepanov · fdc9fe2d · Jan 20, 2026 · 6 filesMessage 50 · ThinInformational 15Details
Commit message · Hennadii Stepanov

ci, iwyu: Fix warnings in `src/primitives` and treat them as errors

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a routine code-quality cleanup. It adjusts which C++ header files are included in several source files under src/primitives and tells the automated 'Include What You Use' (IWYU) checker to treat those files as strictly checked. There is no change to program logic, no bug fix, and no security-relevant behavior.

Lower-priority coins: replace `std::distance` with unambiguous pointer subtractionby Lőrinc · 477c5504 · Jan 20, 2026 · 1 fileMessage 73 · AdequateLow 42Details
Commit message · Lőrinc

coins: replace `std::distance` with unambiguous pointer subtraction

Avoid calling `std::distance` on null pointers in `PoolResource::AllocateChunk`.
Compute remaining bytes with `m_available_memory_end - m_available_memory_it` instead, which is well-defined to be `0` when both are `nullptr`.

Co-authored-by: MarcoFalke <*~=`'#}+{/-|&$^_@721217.xyz>

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Low 42/100

This change fixes a low-level programming issue in Bitcoin Core's custom memory pool allocator. The old code used a standard library function (`std::distance`) to calculate how many unused bytes remained in a memory chunk. That function can have undefined behavior when given null pointers, which could occur when no chunk had been allocated yet. The new code uses plain pointer subtraction, which is explicitly defined to give zero when both pointers are null. The practical security impact is likely limited because the undefined behavior only arises in a specific no-memory-allocated state and the result is used only to decide whether to add leftover bytes to a freelist.

AI review queuedrefactor: Use std::bind_front over std::bindby MarcoFalke · faa18dce · Jan 20, 2026 · 3 filesMessage 57 · ThinInformational 15Details
Commit message · MarcoFalke

refactor: Use std::bind_front over std::bind

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a straightforward code cleanup that replaces older-style std::bind calls with the newer C++20 std::bind_front. It does not change what the program does, only how the code is written. There is no security issue here.

Lower-prioritytest: use pre-generated chainby naiyoma · 81675a78 · Jan 20, 2026 · 1 fileMessage 67 · AdequateInformational 15Details
Commit message · naiyoma

test: use pre-generated chain

67/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only changes a single test file. It replaces a test setup that generated 101 fresh blocks with one that uses blocks already created by the test framework. There is no change to Bitcoin Core's actual network, wallet, or consensus code, so it cannot affect real users or funds.