Open-source signing firmware for Kendryte K210 devices.
Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.
Aug 5 → Feb 6116 seen6 candidatesCompleteFeb 6 → Jun 639 seen3 candidatesCompleteJun 6 → Jul 622 seen1 candidatesCompleteJul 6 → Aug 538 seen5 candidatesCompleteMessage quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.
Public Git author strings; identities are not independently verified.
Last scanned 54 minutes ago
This commit appears to be a routine version bump of a component called 'cUR' inside the MaixPy firmware build. No actual code changes are visible in the provided diff, and the commit message gives no indication of a security fix or vulnera…
74d6ed40by odudex+1−11 fileThis commit appears to update a submodule or dependency called MaixPy to a newer version that includes updated visual glyphs (small icons/symbols). The title and message describe it as a routine maintenance chore, not a security fix. No ac…
a9329228by odudex+1−11 fileThis commit fixes a build-time font-generation script so that a newly supported device ('embed_fire') is recognized. Before the fix, the script printed an error but still produced the same font files. There is no security issue.
f15308e4by odudex+1−01 fileThis commit fixes a bug in Krux, a Bitcoin signing device, where a malformed transaction whose outputs spend more than its inputs could be loaded and shown to the user. Normally such a transaction is impossible on the Bitcoin network, but …
d6813d88by odudex+52−02 filesThis commit fixes a security flaw in Krux, a Bitcoin signing device. Before the fix, an attacker could trick the device into showing a low transaction fee on screen while actually signing a much higher fee. The fix makes the device verify …
fc808059by odudex+353−122 filesThis commit adds a warning screen to Krux, a hardware signing device, when it is asked to sign a multi-input Bitcoin transaction where the amounts of some inputs cannot be independently verified. The risk is that a malicious transaction co…
518b3314by odudex+159−24 filesThis commit updates a bundled firmware component called MaixPy. The commit message says it fixes a 'Shannon heap overflow,' removes an unused random-number binding, and drops support for one hardware variant (Maix Bit). A heap overflow is …
5c4ece9aby odudex+1−11 fileThis commit removes support for an old, discontinued hardware device called the Maix Bit from the Krux Bitcoin wallet firmware. The commit message says the Maix Bit's camera resolution (CIF) was the only one that fed frames larger than QVG…
8090ac73by odudex+11−1279 filesThis commit is a routine engineering cleanup: it removes a Python-only compatibility layer (a 'shim') used for testing and simulation, and makes the test environment use the same C-language UR encoder/decoder module that the real hardware …
2fe2f5f5by odudex+108−24919 filesThis commit refactors how Krux handles animated QR codes in the 'UR' format. It swaps an older decoder API for a newer state-machine API. The visible change is that transient decoding errors are now ignored while scanning, and only termina…
f90219e3by odudex+80−74 filesThis commit only changes how automated tests are run. It builds a C cryptography library during testing so the test environment matches the real firmware more closely. There is no change to the actual Krux firmware or wallet code, and no s…
ac3ea482by odudex+37−03 filesThis commit only changes a test file to make it run faster by faking the system clock. It does not modify any production code, so it has no direct security impact on users of the Krux device or software.
9fecf150by qlrd+13−41 fileThe commit title says it is a routine maintenance update ('chore') for two internal items named cUR and k_quirk in the MaixPy firmware file. No diff content is available, and no verified references were supplied, so there is no visible evi…
f4796afeby odudex+1−11 fileThis change locks the Docker build to one specific, unchangeable version of the GCC compiler image by adding a cryptographic fingerprint (SHA digest). Without this, an attacker who compromises the GCC image registry could silently replace …
ceefbb19by odudex+1−11 fileThis change removes third-party web scripts (MathJax and require.js loaded from a content delivery network) from the project's documentation and replaces them with self-hosted, pre-rendered math images. That eliminates a supply-chain risk …
492820a1by odudex+8779−8928 filesThis commit swaps out the pure-Python QR code encoding/decoding libraries used by the Krux hardware wallet for a new C module called uUR. The stated goal is faster scanning and lower memory use. The change touches code that handles Bitcoin…
401c70c4by odudex+167−7612 filesThis commit removes the visual grid lines drawn on camera scans of TinySeed metal backup plates. It is a user-interface improvement to make the punched holes easier to see; it does not change security logic, cryptography, or data handling.
e4f6e788by Tads+5−192 filesThis commit fixes four security weaknesses in Krux, a Bitcoin hardware-wallet project. The changes prevent: (1) encrypted backups from declaring zero or very low password-stretching effort, which would make them easy to brute-force; (2) mu…
8f62c860by Odudex+263−39 filesThis commit fixes two denial-of-service weaknesses in Krux, a Bitcoin hardware-wallet firmware. First, it caps how much data can come out of compressed (deflated) QR codes and encrypted backups, preventing a maliciously crafted 'zip bomb' …
bd95e828by Odudex+102−610 filesThis commit adds a warning screen to Krux's message-signing feature when the user is about to sign a raw 32-byte hash or a 64-character hex string. Previously, the device would silently treat such inputs as already-hashed values and sign t…
23bc73b3by Odudex+46−726 filesExpand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.
8767792e · Nov 30, 2025 · 13 filesTriage 12docs: update installer info (#782)
The latest installer changed authenticity/integrity checks. This commit
removes `snippets/verify-the-*.en.txt` as well change some
`getting-started/installing/from-gui` files to comply with the necessary
steps.
850460a8 · Nov 28, 2025 · 3 filesTriage 0Docs troubleshooting wonder-mv (#788)
Why it was queued34f03e5c · Nov 26, 2025 · 2 filesTriage 0UI tweak: Adjust mnemonic list alignment (#786)
* Right align mnemonic numbers; add missing space char
* Format the 2nd half of a 24 word display
* DRY optimization
1d6113fe · Nov 26, 2025 · 1 fileTriage 0Fix mnemonic index number display for replacement words (#785)
f15e198e · Nov 25, 2025 · 1 fileTriage 0fix: pMofN QRs now deal with bytes data
f091ec71 · Nov 25, 2025 · 1 fileInformational 15Refactor capture entropy test to be less fragile, more DRY (#781)
Why it was queuedThis commit only refactors a single test file to make the tests less brittle and remove duplicated code. It does not change any production code, cryptographic logic, or user-facing behavior. There is no security issue here.
30efd634 · Nov 24, 2025 · 25 filesInformational 15Minor UI change: Add line break for "bits/px" Shannon's entropy text (#780)
Why it was queuedThis commit is a cosmetic user-interface change. It splits a single line of text showing camera-captured entropy statistics into two lines so it fits better on small screens. No security-sensitive code, calculations, or behavior was altered.
f11b9e19 · Nov 24, 2025 · 1 fileTriage 0Extend USB list port macOS command with more possible outputs (#773)
Why it was queued3ddefc52 · Nov 22, 2025 · 4 filesTriage 0bump version to 25.11.beta1
add WonderK to release script
8e6e580f · Nov 22, 2025 · 2 filesTriage 0UR QR codes: reduce density using upper case (#776)
fd46e8df · Nov 22, 2025 · 7 filesTriage 12True Binary QR codes (#777)
* Update Maixpy to return bytes object from binary QR codes
* Update Datum to auto convert, when possible, binary QRs to strings
* Ensure addresses become strings when scanned
* When encryption-key is scanned, try to decode as str
---------
Co-authored-by: Jean Do <117163651+jdlcdl@users.noreply.github.com>
37085e3e · Nov 22, 2025 · 1 fileTriage 12Kboot: Disable "interactive mode" (Embed Fire issue) (#778)
Why it was queueddf07d2e4 · Nov 22, 2025 · 2 filesTriage 0Docs: info about embed fire loose touchscreen (#779)
and videos management
d73c689f · Nov 19, 2025 · 1 fileTriage 0docs refactor parts add info about PPI (#775)
Why it was queued66e8ea10 · Nov 18, 2025 · 2 filesTriage 0docs: update Mac driver troubleshooting II
Why it was queuedd885de64 · Nov 18, 2025 · 1 fileTriage 0docs: update Mac driver troubleshooting
Why it was queued78487023 · Nov 17, 2025 · 3 filesTriage 0Add info about missing CH341 driver for Mac OS (#774)
Why it was queuedfad4a0b8 · Nov 17, 2025 · 27 filesLow 37Give warning for non-ASCII BIP39-passphrase (#769)
Why it was queuedThis change relaxes a safety rule in the Krux hardware wallet firmware. Previously, if a user scanned a BIP39 passphrase QR code containing non-English/non-ASCII characters (for example accented letters or symbols), Krux would block it with an error. Now it shows a warning and lets the user proceed anyway. The risk is that different wallet software may interpret those special characters slightly differently, so the user could end up with a different Bitcoin key than expected and potentially lose access to funds. The change is intentional and documented, not a hidden bug.
150e8a16 · Nov 17, 2025 · 1 fileTriage 0Extend USB list port macOS command with more possible outputs (#773)
Why it was queued23dd7323 · Nov 17, 2025 · 1 fileTriage 0Datum better menu btn offset (#770)
07d9b2c9 · Nov 17, 2025 · 1 fileTriage 0Docs: add new cam to embed fire (#762)
Why it was queued15e4f26f · Nov 13, 2025 · 1 fileTriage 0update CHANGELOG
Why it was queued6806a792 · Nov 13, 2025 · 3 filesLow 44Embit update: Improved BIP39 mnemonic validation (#759)
Why it was queuedThis commit tightens how a Bitcoin wallet tool (Krux) checks recovery phrases. Previously, the code accepted phrases with extra spaces, tabs, newlines, or commas between words because it used a loose 'strip and split' approach. Now it requires words to be separated by exactly one ordinary space. The change is defensive: malformed phrases that a user might accidentally type are now rejected, reducing the chance of accepting an invalid or unexpectedly interpreted recovery phrase.
135ff2d6 · Nov 13, 2025 · 1 fileTriage 0screensaver bugfix: fix trigger condition (#761)
8df6ac23 · Nov 13, 2025 · 4 filesTriage 12Add backtick to NUM_SPECIAL_2 (#766)
Why it was queued