BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2916 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

257security candidates612second-pass queue2889AI analyses
191commits · 30 days
474commits · 60 days
1492commits · 180 days
2878commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
952Strong · 80–100
1188Adequate · 60–79
688Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow16050159064
MarcoFalke41021406074
Lőrinc17721177081
fanquake22819226057
Hennadii Stepanov21114208063
rkrux57957074
Sjors Provoost89889074
merge-script33718088
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Analysis record

Published AI watches

Last scanned 13 minutes ago

Informational 18 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35930: wallet: post-#35501 cleanups in CWalletTx

This is a follow-up cleanup and hardening patch for the Bitcoin Core wallet's handling of transactions that have multiple possible witness versions (same transaction ID but different witness data). It renames a variable, simplifies a helpe…

Added input-validation during wallet transaction deserializationNew unit test specifically exercises rejection of mismatched variant txidFollow-up to PR #35501 which introduced witness-variant tracking in the wallet
512dc9afby Ava Chow+68−315 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35729: refactor: test: Unroll `&&` conditions in macros

This commit only changes Bitcoin Core's internal test code. It splits combined conditions inside test-check macros (like BOOST_CHECK(a && b)) into separate checks so that when a test fails, the test output points to the exact failing condi…

aa0e0f79by merge-script+196−9519 files
No security note in commit
Low 26 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35493: wallet, descriptor: Fix MuSig private key completeness checks on `importdescriptors`

This commit fixes a bug in Bitcoin Core's wallet import logic for a new type of multi-signature setup called MuSig. Previously, when a user imported a MuSig descriptor that already contained all needed private keys, the wallet incorrectly …

False-positive warning in wallet import for fully-private MuSig descriptorsIncorrect private-key completeness check on synthetic aggregate public keyDescriptor logic now delegates completeness to `Descriptor::HavePrivateKeys()`
2c01832fby merge-script+76−374 files
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35943: doc: fix dead link in txrequest.h

This commit only fixes a broken web link in a code comment. It replaces an outdated URL to a research paper with a working URL to the same paper. There is no change to program logic, no security fix, and no vulnerability.

5d051c05by merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#33186: wallet, test: Ancient Wallet Migration from v0.14.3 (no-HD and Single Chain)

This commit only adds new automated tests for migrating very old Bitcoin Core wallets (version 0.14.3 from 2017) to the modern descriptor wallet format. It does not change any wallet production code, consensus rules, or network behavior. T…

757aa573by merge-script+246−124 files
No security note in commit
Low 28 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35925: wallet, rpc: Exclude non-owned addresses from listreceivedby*

This update fixes a wallet reporting bug. When a user asked their Bitcoin wallet to list every address that had received money, including empty ones, the result incorrectly included foreign addresses that the wallet merely knew about (for …

Information disclosure: wallet RPCs leaked existence/labels of foreign addressesIncorrect access-control boundary: non-owned addresses exposed in 'received' reportFix uses IsMine() rather than address purpose metadata, avoiding inconsistent purpose handling
e8cc21c5by Ava Chow+19−32 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35937: test: Append print_suppressions=0 to LSAN_OPTIONS, and suppress bitcoin-qt

This commit only changes test configuration. It tells the LeakSanitizer tool used during automated testing to stop printing long lists of suppressed memory leaks, and it narrows the list of ignored leaks to the bitcoin-qt GUI test binary. …

5973e075by merge-script+3−42 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable misc-definitions-in-headers

This commit is a code cleanup: it turns on a clang-tidy style check called 'misc-definitions-in-headers' and suppresses that check around a large inline implementation block in a benchmark header. There is no change to Bitcoin's runtime be…

fa93132dby MarcoFalke+3−02 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable clang-tidy rule to reject anon namespace in header

This commit only changes a linting configuration file for the project's code style checker. It enables a rule that prevents anonymous namespaces from being used in header files, which is a code-quality and build-hygiene practice. There is …

No security-relevant signals in the diff or commit message.Change is purely a static-analysis/linting configuration update.
fa5ca877by MarcoFalke+2−11 file
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-priorityscripted-diff: [doc] Unify stale copyright headersby fanquake · 3e4765ee · Dec 19, 2025 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · fanquake

scripted-diff: [doc] Unify stale copyright headers

-BEGIN VERIFY SCRIPT-

sed --in-place --regexp-extended \
's;( 20[0-2][0-9])(-20[0-2][0-9])? The Bitcoin Core developers;\1-present The Bitcoin Core developers;g' \
$( git grep -l 'The Bitcoin Core developers' -- ':(exclude)COPYING' ':(exclude)src/ipc/libmultiprocess' ':(exclude)src/minisketch' )

-END VERIFY SCRIPT-

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only updates a copyright notice in a single test file, changing the year range from '2020-2022' to '2020-present'. There is no code change, no functional change, and no security relevance.

AI review queuedcontrib: remove copyright_header.pyby fanquake · ba6315d2 · Dec 19, 2025 · 2 filesMessage 35 · OpaqueInformational 15Details
Commit message · fanquake

contrib: remove copyright_header.py

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit simply deletes a helper script used to manage copyright headers in source files, along with its documentation. It does not change any part of the Bitcoin Core software that handles transactions, networking, wallets, or consensus rules. There is no security issue here.

AI review queuedrefactor: [rpc] Remove confusing and brittle integral castsby MarcoFalke · fa66e2d0 · Dec 19, 2025 · 9 filesMessage 62 · AdequateInformational 19Details
Commit message · MarcoFalke

refactor: [rpc] Remove confusing and brittle integral casts

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 19/100

This commit is a code cleanup in Bitcoin Core's RPC (remote procedure call) response formatting. It removes many old-style C-style casts like (int64_t) and replaces them with either no cast or a safer static_cast. The change is described by the authors as a refactor to make the code less confusing and brittle. There is no direct evidence in the commit or supplied references that this fixes an active security vulnerability.

AI review queuedrpc: [mempool] Remove erroneous Univalue integral castsby MarcoFalke · fab1f4b8 · Dec 19, 2025 · 2 filesMessage 50 · ThinLow 37Details
Commit message · MarcoFalke

rpc: [mempool] Remove erroneous Univalue integral casts

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Low 37/100

This commit fixes a bug in Bitcoin Core's mempool RPC output where fee values were incorrectly narrowed to 32-bit integers before being displayed. For very large fee bumps (over about 86 bitcoins), this cast could corrupt the reported 'chunkfee' and 'fees.chunk' values, making them look much smaller or even negative. The fix removes the unnecessary casts and adds a test for large fee deltas. It is a correctness bug in information shown to users and miners, not a direct theft-of-funds vulnerability.

Security candidatemining: rename getCoinbaseTx() to ..RawTx()by Sjors Provoost · d59b4cdb · Dec 19, 2025 · 5 filesMessage 73 · AdequateInformational 15Details
Commit message · Sjors Provoost

mining: rename getCoinbaseTx() to ..RawTx()

This frees up the name getCoinbaseTx() for the next commit.

Changing a function name does not impact IPC clients, as they only
consider the function signature and sequence number.

73/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Names security-relevant behavior explicitly
Why it was queued
signing boundary
AI analysis · Informational 15/100

This commit simply renames a function from getCoinbaseTx() to getCoinbaseRawTx() across the codebase, including documentation, interface definitions, IPC protocol files, implementation, and tests. It is a preparatory refactoring change with no functional or security impact.

Lower-priorityrefactor: Use uint64_t over size_t for serialize corruption check in fees.datby MarcoFalke · fa1d17d5 · Dec 19, 2025 · 1 fileMessage 62 · AdequateInformational 15Details
Commit message · MarcoFalke

refactor: Use uint64_t over size_t for serialize corruption check in fees.dat

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This is a one-line type change in Bitcoin Core's fee estimation data reader. It changes two local variables from 'size_t' (whose size varies by platform) to 'uint64_t' (a fixed 64-bit type) when reading the fees.dat file. The stated purpose is to make a serialization corruption check more consistent across platforms. There is no direct evidence in the commit of an exploitable vulnerability, and the change appears defensive/refactoring in nature.

Lower-priorityFix compilation for old Boost versionsby Lőrinc · fd9f1acc · Dec 18, 2025 · 2 filesMessage 76 · AdequateInformational 15Details
Commit message · Lőrinc

Fix compilation for old Boost versions

Fixes https://github.com/bitcoin/bitcoin/issues/34101 by reverting `boost::multi_index::contains` calls only available in Boost 1.78.0

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This commit is a straightforward build-compatibility fix. It replaces two newer Boost library function calls (`contains`) with older, equivalent alternatives (`find == end` and `count`) so Bitcoin Core can compile against Boost versions older than 1.78.0. There is no change to program logic, behavior, or security.

AI review queuedrefactor: enable `readability-container-contains` clang-tidy ruleby Lőrinc · 1e94e562 · Dec 18, 2025 · 5 filesMessage 97 · StrongInformational 15Details
Commit message · Lőrinc

refactor: enable `readability-container-contains` clang-tidy rule

Replace the last few instances of `.count() != 0` and `.count() == 0` and `.count()` patterns with the more expressive C++20 `.contains()` method:

* `std::set<std::string>` in `getblocktemplate` RPC;
* `std::map<std::string, ...>` in `transaction_tests`;
* other bare `std::unordered_set` and `std::map` count calls.

With no remaining violations, enable the `readability-container-contains`
clang-tidy check to prevent future regressions.

97/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a code cleanup that replaces old-style container lookups like `.count()` with the newer, clearer `.contains()` method introduced in C++20. It also turns on a linting rule to keep future code consistent. There are no functional changes and no security impact.

Lower-priorityclusterlin: randomize equal-feerate parts of linearization (privacy)by Pieter Wuille · 5ce28007 · Dec 18, 2025 · 2 filesMessage 78 · AdequateLow 28Details
Commit message · Pieter Wuille

clusterlin: randomize equal-feerate parts of linearization (privacy)

This places equal-feerate chunks (with no dependencies between them) in random
order in the linearization output, hiding information about DepGraph insertion
order from the output. Likewise, it randomizes the order of transactions within
chunks for the same reason.

78/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Names security-relevant behavior explicitly
AI analysis · Low 28/100

This commit changes how Bitcoin Core orders transactions when grouping them into blocks or processing clusters. Previously, when several transaction groups had the same fee rate and no dependencies, the order was predictable based on internal data structures. Now the order is randomized. The stated goal is to hide information about the order in which transactions were inserted into the system, improving privacy by making it harder for observers to infer internal state from the final output.

Lower-priorityclusterlin: replace cluster linearization with SFL (feature)by Pieter Wuille · 3efc94d6 · Dec 18, 2025 · 7 filesMessage 83 · StrongInformational 18Details
Commit message · Pieter Wuille

clusterlin: replace cluster linearization with SFL (feature)

This replaces the existing LIMO linearization algorithm (which internally uses
ancestor set finding and candidate set finding) with the much more performant
spanning-forest linearization algorithm.

This removes the old candidate-set search algorithm, and several of its tests,
benchmarks, and needed utility code.

The worst case time per cost is similar to the previous algorithm, so
ACCEPTABLE_ITERS is unchanged.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 18/100

This commit swaps out Bitcoin Core's old mempool cluster linearization algorithm (LIMO) for a new one called SFL (spanning-forest linearization). The change is described as a performance improvement, not a security fix. It removes a lot of old search-based code and tests, and temporarily relaxes one test assertion because the new algorithm does not yet guarantee the smallest possible number of chunks even when it finds an optimal ordering. The production code now always runs an extra post-processing step to keep chunks connected.

Lower-priorityclusterlin: keep FIFO queue of improvable chunks (preparation)by Pieter Wuille · ddbfa4df · Dec 18, 2025 · 3 filesMessage 73 · AdequateInformational 14Details
Commit message · Pieter Wuille

clusterlin: keep FIFO queue of improvable chunks (preparation)

This introduces a queue of chunks that still need processing, in both
MakeTopological() and OptimizationStep(). This is simultaneously:
* A preparation for introducing randomization, by allowing permuting the
queue.
* An improvement to the fairness of suboptimal solutions, by distributing
the work more fairly over chunks.
* An optimization, by avoiding retrying chunks over and over again which
are already known to be optimal.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 14/100

This commit is a routine internal refactoring of Bitcoin Core's transaction-cluster linearization algorithm. It replaces a loop that scans all transactions with a FIFO queue of 'chunks' that might still be improvable. The change is described by the author as preparation for future randomization, a fairness improvement, and a performance optimization. There is no indication in the commit or supplied references that this fixes a security bug or is security-relevant.

Lower-priorityclusterlin: remove unused MergeLinearizations (cleanup)by Pieter Wuille · 91399a79 · Dec 18, 2025 · 3 filesMessage 65 · AdequateInformational 15Details
Commit message · Pieter Wuille

clusterlin: remove unused MergeLinearizations (cleanup)

This ended up never being used in txgraph.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit simply removes an unused helper function called MergeLinearizations, along with its benchmark and fuzz test. It is a routine code cleanup with no security relevance.

Lower-priorityclusterlin: drop support for improvable chunking (simplification)by Pieter Wuille · 75bdb925 · Dec 18, 2025 · 4 filesMessage 73 · AdequateInformational 14Details
Commit message · Pieter Wuille

clusterlin: drop support for improvable chunking (simplification)

With MergeLinearizations() gone and the LIMO-based Linearize() replaced by SFL, we do not
need a class (LinearizationChunking) that can maintain an incrementally-improving chunk
set anymore.

Replace it with a function (ChunkLinearizationInfo) that just computes the chunks as
SetInfos once, and returns them as a vector. This simplifies several call sites too.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 14/100

This commit is a routine internal code cleanup in Bitcoin Core's transaction graph (mempool) linearization logic. It removes a more complex class (LinearizationChunking) that supported incremental updates and replaces it with a simpler function (ChunkLinearizationInfo) that computes chunk information once. There is no indication of a security bug, vulnerability, or behavior change affecting users or the network.

Security candidateclusterlin: randomize various decisions in SFL (feature)by Pieter Wuille · 13aad26b · Dec 18, 2025 · 3 filesMessage 90 · StrongInformational 19Details
Commit message · Pieter Wuille

clusterlin: randomize various decisions in SFL (feature)

This introduces a local RNG inside the SFL state, which is used to randomize
various decisions inside the algorithm, in order to make it hard to create
pathological clusters which predictably have bad performance.

The decisions being randomized are:
* When deciding what chunk to attempt to split, the queue order is
randomized.
* When deciding which dependency to split on, a uniformly random one is
chosen among those with higher top feerate than bottom feerate within
the chosen chunk.
* When deciding which chunks to merge, a uniformly random one among those
with the higher feerate difference is picked.
* When merging two chunks, a uniformly random dependency between them is
now activated.
* When making the state topological, the queue of chunks to process is
randomized.

90/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Names security-relevant behavior explicitly
Why it was queued
entropy or randomness
AI analysis · Informational 19/100

This commit adds randomness to an internal Bitcoin Core algorithm that orders groups of related transactions (clusters) for block inclusion. The goal is to prevent someone from deliberately crafting a cluster of transactions that would always trigger the worst-case performance of the algorithm. It is a hardening/performance improvement, not a fix for a vulnerability that steals funds or breaks consensus.

Lower-priorityclusterlin: add support for loading existing linearization (feature)by Pieter Wuille · 6a8fa821 · Dec 18, 2025 · 2 filesMessage 50 · ThinInformational 13Details
Commit message · Pieter Wuille

clusterlin: add support for loading existing linearization (feature)

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 13/100

This commit adds a new feature to Bitcoin Core's internal transaction-cluster linearization code. It lets the algorithm start from an existing ordering of transactions rather than building one from scratch. The change is purely an optimization/feature addition in mempool policy code and does not alter network rules, consensus, or wallet behavior. There is no indication it fixes a security bug.

AI review queuedclusterlin: ReadLinearization for non-topological (tests)by Pieter Wuille · da48ed9f · Dec 18, 2025 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · Pieter Wuille

clusterlin: ReadLinearization for non-topological (tests)

Rather than using an ad-hoc no-dependency copy of the graph when a potentially
non-topological linearization is needed in the clusterlin fuzz test, add this
directly as a feature in ReadLinearization().

This is preparation for a later commit where another use for such a function
is added.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
fuzzing or regression evidencesecond-pass: broader security terminology
AI analysis · Informational 15/100

This is a small internal cleanup of Bitcoin Core's fuzz testing code. It refactors how test inputs are converted into arbitrary orderings of transactions, with no change to production consensus or networking code. There is no security issue visible in the commit.

Lower-priorityclusterlin: add class implementing SFL state (preparation)by Pieter Wuille · c461259f · Dec 18, 2025 · 2 filesMessage 91 · StrongInformational 14Details
Commit message · Pieter Wuille

clusterlin: add class implementing SFL state (preparation)

This adds a data structure representing the optimization state for the spanning-forest
linearization algorithm (SFL), plus a fuzz test for its correctness.

This is preparation for switching over Linearize() to use this algorithm.

See https://delvingbitcoin.org/t/spanning-forest-cluster-linearization/1419 for
a description of the algorithm.

91/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 14/100

This commit adds a new internal data structure and algorithm implementation for optimizing how Bitcoin Core orders groups of related transactions (clusters) when building blocks. It is purely preparatory code: it introduces the new 'spanning-forest linearization' state class and a fuzz test to verify its correctness, but it does not yet wire it into the actual block-building path. There is no indication this change fixes or introduces a security vulnerability.

Lower-prioritybuild: Update minimum required Boost versionby Hennadii Stepanov · f480c1e7 · Dec 18, 2025 · 2 filesMessage 57 · ThinInformational 17Details
Commit message · Hennadii Stepanov

build: Update minimum required Boost version

Building with Boost 1.73.0 is broken.

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 17/100

This commit simply raises the minimum required Boost library version from 1.73.0 to 1.74.0 because building with 1.73.0 is broken. It is a build-system/dependency documentation change, not a fix for a security vulnerability in Bitcoin Core itself.

Lower-priorityclusterlin: add known-correct optimal linearization tests (tests)by Pieter Wuille · 86dd550a · Dec 18, 2025 · 2 filesMessage 60 · AdequateInformational 15Details
Commit message · Pieter Wuille

clusterlin: add known-correct optimal linearization tests (tests)

60/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit adds new unit tests for Bitcoin Core's transaction-cluster linearization code. It does not change any production (non-test) code, network behavior, or consensus rules. The tests verify that the linearization algorithm produces known-optimal results on a large set of real and synthetic mempool cluster examples. There is no security-relevant change here.

Lower-priorityclusterlin: replace benchmarks with SFL-hard ones (bench)by Pieter Wuille · 95bfe7d5 · Dec 18, 2025 · 2 filesMessage 65 · AdequateInformational 15Details
Commit message · Pieter Wuille

clusterlin: replace benchmarks with SFL-hard ones (bench)

This also adds a per-cost variant of each.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit only changes benchmark tests and adds a small helper function to count transaction dependencies. It does not alter how Bitcoin Core processes real transactions or network messages, so it has no direct security impact on running nodes.

Lower-priorityAdd regtest support to bitcoin-chainstate toolby stringintech · 5f3d6bdb · Dec 18, 2025 · 1 fileMessage 70 · AdequateInformational 15Details
Commit message · stringintech

Add regtest support to bitcoin-chainstate tool

Adds -regtest flag to enable testing with regtest chain parameters.

70/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit adds a command-line flag to an experimental developer/testing tool so it can use Bitcoin's local-only 'regtest' network instead of the real main network. It is a straightforward feature addition with no security relevance.

Lower-prioritytest: Add bitcoin-chainstate test for assumeutxo functionalityby stringintech · 7b5d256a · Dec 18, 2025 · 2 filesMessage 87 · StrongInformational 15Details
Commit message · stringintech

test: Add bitcoin-chainstate test for assumeutxo functionality

Adds functional test coverage for bitcoin-chainstate tool loading a datadir initialized with an assumeutxo snapshot

87/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit adds a new automated test for the bitcoin-chainstate tool. It checks that the tool can load a data directory initialized with an assumeutxo snapshot and continue processing new blocks. There is no change to production code that handles user funds, network messages, or consensus rules, and no security fix is present.

AI review queuedFix `ChainstateManager::AddChainstate()` assertion crashby stringintech · 2bc32656 · Dec 18, 2025 · 1 fileMessage 65 · AdequateLow 31Details
Commit message · stringintech

Fix `ChainstateManager::AddChainstate()` assertion crash

Check mempool exists before accessing size when prev_chainstate doesn't have initialized mempool.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
second-pass: broader security terminology
AI analysis · Low 31/100

This is a one-line fix in Bitcoin Core that prevents a program crash (assertion failure) when adding a new chainstate. The crash could occur if the previous chainstate did not have a memory pool (mempool) initialized. The change simply checks whether the mempool exists before checking its size, avoiding an invalid memory access. It is a defensive hardening fix rather than a user-triggerable exploit path under normal operation.

Lower-prioritydoc: add missing copyright headersby fanquake · aeb7ccb9 · Dec 18, 2025 · 2 filesMessage 45 · ThinInformational 15Details
Commit message · fanquake

doc: add missing copyright headers

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only adds standard copyright notice comments to the top of two test-only source files. It makes no changes to program logic, data handling, or network behavior, and therefore has no security relevance.

Security candidatecontrib: output copyright in generate-seeds.pyby fanquake · 68a7cb8f · Dec 18, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · fanquake

contrib: output copyright in generate-seeds.py

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
seed or entropy path
AI analysis · Informational 15/100

This commit simply adds a standard copyright and license notice to the top of a generated source file. It is a legal/documentation change, not a security fix or code behavior change.