RB
← All projectsRust Bitcoin

rust-bitcoin

Rust library for Bitcoin data structures, serialization, consensus encoding, and scripts.

BitcoinCryptographic librariesNormal
Repository coverage

2301 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

529security candidates508second-pass queue2200AI analyses
135commits · 30 days
264commits · 60 days
1114commits · 180 days
2033commits · 365 days
Backfill bands
Aug 5 → Feb 6787 seen32 candidatesComplete
Feb 6 → Jun 6878 seen53 candidatesComplete
Jun 6 → Jul 6211 seen15 candidatesComplete
Jul 6 → Aug 5184 seen2 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

66/100 average clarity
499Strong · 80–100
1084Adequate · 60–79
567Thin · 40–59
151Opaque · 0–39
20security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Andrew Poelstra22076151190
Mitchell Bagot649193645068
Tobin C. Harding41566410063
jrakibi944994068
Nick Johnson19121190060
Jamil Lambert, PhD11919116061
satsfy (Renato Britto)381527066
Fmt Bot331431045
Trevor Arjeski111111069
Shing Him Ng31731056
Martin Habovstiak30628068
Ismail Daif22622050
Analysis record

Published AI watches

Last scanned 1 hour ago

Low 33 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6946: Fix integer overflow in `get_array`

This commit fixes a small but real bug in a Rust helper that reads fixed-size chunks from a data slice. The helper was supposed to safely return 'nothing' when asked to read past the end of the data, but it accidentally added two numbers t…

Integer overflow in bounds-checking helperContract violation: method documented to return None on out-of-bounds access could panic insteadDebug-build panic (denial of service) possible
c6e80843by Andrew Poelstra+2−11 file
Vendor flagged security relevance
Moderate 62 AI analysisMessage 73 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Fix integer overflow in `get_array`

This commit fixes a bug in a Rust helper method called `get_array`, which is meant to safely read a fixed-size chunk from a slice and return nothing if the requested range is out of bounds. The bug was that the code added the caller's offs…

Integer overflow in bounds calculationPotential panic due to violated internal length expectationCaller-controlled arithmetic used for memory access bounds
56fb1287by Martin Habovstiak+2−11 file
Vendor flagged security relevance
High 71 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6915: primitives: Fix `Witness` handling of oversized items

This commit fixes a bug in how the Rust Bitcoin library counts and compares transaction witness data when a witness contains an oversized item. Previously, several functions relied on an iterator that silently skips oversized items, causin…

Inconsistent serialization/iterator behavior for oversized witness itemswtxid collision risk between transactions differing only in oversized witness bytesIncorrect witness equality for oversized single-item stacks
e1ed5884by Andrew Poelstra+106−273 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6922: Use `try_fold` instead of `fold` in `Sum` impl

This is a code-quality and performance improvement, not a security fix. It changes how the library adds up lists of Bitcoin amounts so that it stops early once an overflow is detected, rather than continuing to process the rest of the list…

No security-relevant signal in commit message or diffRefactor preserves overflow-checking behavior (short-circuits instead of continuing)New API method `NumOpResult::from_result` is a pure inverse of existing `into_result`
86e4d5daby Andrew Poelstra+60−562 files
No security note in commit
Moderate 52 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6893: units: Reject malformed amount strings

This update fixes a bug in how the library reads Bitcoin amount strings like '1.5 BTC'. Previously, certain malformed inputs such as '.', '._', '1_', '1_.0', and '1._0' were incorrectly accepted and treated as valid amounts (often zero), i…

Input validation bypass in amount parserMalformed strings silently parsed as zero or ordinary amountsUnderscore separator placement not enforced
fcb14622by Andrew Poelstra+88−343 files
Vendor flagged security relevance
Low 48 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6921: units: fix div_by_fee_rate_ceil precision

This commit fixes a rounding bug in how the rust-bitcoin library calculates the minimum transaction weight needed to pay a given fee at a given fee rate. The old code rounded the fee rate up too early, which could produce a weight slightly…

Incorrect fee-weight calculation due to premature integer roundingPotential transaction fee shortfall when using div_by_fee_rate_ceilOverflow protection added for Amount::MAX * 4_000_000 intermediate value
b31212e0by Andrew Poelstra+38−82 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6898: Release tracking PR: `consensus-encoding 1.3.0`

This is a routine release-management commit that bumps the version number of the `bitcoin-consensus-encoding` crate from 1.2.0 to 1.3.0 and updates lock files accordingly. It contains no code changes that fix or introduce a security issue.…

0cfc7908by Andrew Poelstra+37−349 files
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6909: build(deps): bump actions/labeler from 6.2.0 to 7.0.0

This commit updates a GitHub Actions automation tool (actions/labeler) used to automatically tag pull requests with labels. It is a routine dependency version bump from 6.2.0 to 7.0.0, with no indication of a security fix or vulnerability.…

4ed7c068by Andrew Poelstra+1−11 file
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6910: build(deps): bump actions/checkout from 7.0.0 to 7.0.1

This commit is a routine update to the GitHub Actions checkout tool used by the project's automated workflows. It only changes version numbers in configuration files and does not alter the actual Bitcoin library code that users run. There …

328c4ae9by Andrew Poelstra+37−3717 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6911: build(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0

This commit updates a GitHub Actions helper used to install a Python tool called uv, which runs the zizmor security scanner. The change only bumps the pinned version of the helper from 8.3.2 to 9.0.0. The new version's release notes mentio…

No security-relevant signals in commit or upstream release notesDependency bump in CI only, not in library codeNo CVE or advisory referenced
67600795by Andrew Poelstra+2−22 files
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6912: build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3

This is a routine Dependabot update that changes the pinned version of GitHub's official CodeQL upload-sarif action from 4.37.0 to 4.37.3 in a single CI workflow. The action only uploads static analysis results to GitHub; it does not touch…

b51cec63by Andrew Poelstra+1−11 file
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6913: build(deps): bump dtolnay/rust-toolchain from 6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 to 02cb101ec7c40f2c49e1d9714d64511d8e1b74de

This is a routine update to a GitHub Actions helper used to install Rust during automated testing. It only changes the pinned version of the dtolnay/rust-toolchain action in workflow files. There is no change to the actual rust-bitcoin lib…

90330d15by Andrew Poelstra+8−84 files
No security note in commit
Informational 20 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6906: consensus_encoding, primitives: expose exact encoding size for block and transaction

This commit adds a way to ask, in advance, exactly how many bytes a Bitcoin block or transaction will take when serialized. It is a feature addition for the library's encoding system, not a fix for a vulnerability. There is no indication i…

No security-relevant signals in commit message or diffFeature addition: expose exact encoded sizeNo mention of vulnerability, CVE, bug bounty, or security report
1a365d53by Andrew Poelstra+129−1068 files
No security note in commit
Informational 15 AI analysisMessage 88 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

build(deps): bump dtolnay/rust-toolchain

This is a routine update by Dependabot that changes which version of a popular GitHub Action (dtolnay/rust-toolchain) is used to install Rust in automated CI workflows. The commit only updates pinned commit hashes in workflow files; it doe…

a31e0b0eby dependabot[bot]+8−84 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

build(deps): bump github/codeql-action/upload-sarif

This is a routine patch-version update of a GitHub-maintained action used only to upload static-analysis results (SARIF files) from a scheduled CI job. The change does not touch any project source code, cryptographic logic, or user-facing …

2cac6e38by dependabot[bot]+1−11 file
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

build(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0

This is a routine automated update by Dependabot that changes the pinned version of a GitHub Action used to install a Python tool called 'uv' in two workflow files. The new version is a major release of the setup-uv action itself, but the …

7d7e7269by dependabot[bot]+2−22 files
No security note in commit
Informational 21 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6894: Harden `Copy` policy and apply to all pre-1.0 crates

This commit removes the automatic `Copy` trait from several public error types in the rust-bitcoin library and updates the project's written policy to discourage `Copy` on error types. `Copy` is a Rust trait that lets values be duplicated …

API hardening: removes `Copy` from public error types to preserve future flexibilityPolicy update: docs/policy.md now explicitly discourages `Copy` on error typesNo vulnerability fix: change is defensive/preventive, not reactive to a disclosed issue
457cb9b5by Andrew Poelstra+14−146 files
No security note in commit
Informational 18 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6787: Move `from_script` to `Address` and drop `AddressExt`

This change is a routine code cleanup, not a security fix. It moves a method that converts Bitcoin output scripts into human-readable addresses from a temporary 'extension trait' directly onto the main Address type. The actual conversion l…

ed42dabdby Andrew Poelstra+38−414 files
No security note in commit
Low 35 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6061: Units improvements

This is a routine code-quality and API-expansion pull request for the rust-bitcoin library's 'units' crate. It widens some fee-rate constructors from 32-bit to 64-bit inputs, renames the old 32-bit versions, improves serde error messages, …

API surface change: new u64 fee-rate constructors return NumOpResult to prevent silent overflowRenaming of existing u32 constructors to *_u32 may break downstream callers at compile time (breaking API change)Removal of artificial restriction in from_per_vb allows larger valid inputs
f9460859by Andrew Poelstra+266−12211 files
No security note in commit
Low 49 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6862: units: Preserve error in NumOpResult add and sub

This commit fixes a bug in how the library handles math errors. Previously, if you added or subtracted two values and one of them already had an error (for example, dividing by zero), the library would silently replace that original error …

Error-state information loss in arithmetic wrapper typeIncorrect error propagation could mask prior failures such as division by zeroDefensive correctness fix in numeric operation result handling
5324e59aby Andrew Poelstra+26−41 file
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Security candidate2026-05-17 automated rustfmt nightlyby Fmt Bot · f0178809 · May 17, 2026 · 5 filesMessage 45 · ThinInformational 15Details
Commit message · Fmt Bot

2026-05-17 automated rustfmt nightly

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
cryptography-sensitive path
AI analysis · Informational 15/100

This commit is a routine automated code-formatting run by the rustfmt tool. It only changes whitespace, import order, and brace style in five files. There are no functional code changes, no bug fixes, and no security-related alterations.

Security candidatecrypto: Remove alloc feature gate from taproot moduleby Mitchell Bagot · b91a6600 · May 16, 2026 · 2 filesMessage 73 · AdequateInformational 18Details
Commit message · Mitchell Bagot

crypto: Remove alloc feature gate from taproot module

During the move of the taproot module into crypto, the alloc feature
was used to gate the entire module for simplicity. However, to match
the ecdsa module, gating should only be used on the types and
functionality necessary within the module.

Remove feature gate from taproot module and individually gate
functionality in the taproot module.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 18/100

This change is a routine code cleanup, not a security fix. It removes an overly broad feature gate so that parts of the Taproot cryptographic module are available even when the optional 'alloc' feature is disabled, while keeping functions that actually need memory allocation behind the gate. There is no indication it fixes a vulnerability.

Security candidatecrypto: Change taproot::Signature FromStr to array hex decodeby Mitchell Bagot · 7422a744 · May 16, 2026 · 1 fileMessage 78 · AdequateInformational 17Details
Commit message · Mitchell Bagot

crypto: Change taproot::Signature FromStr to array hex decode

The taproot::Signature FromStr impl currently uses hex::decode_to_vec
to parse the hex into a byte vector which is then decoded with
from_slice. Since a valid signature can only be 64 or 65 bytes long,
the alloc dependency can be entirely removed by instead using
decode_to_array with a preceeding string length check.

78/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Names security-relevant behavior explicitly
Why it was queued
signing boundarycryptography-sensitive path
AI analysis · Informational 17/100

This commit is a small internal cleanup in the rust-bitcoin library. It changes how a Taproot signature is parsed from a hexadecimal string so that it no longer needs to allocate a temporary byte vector. The change removes an unnecessary memory allocation but does not alter the allowed signature formats or fix any vulnerability. It is a performance and dependency-reduction refactor, not a security fix.

Security candidateRemove the unstable hex-conservative dependencyby Tobin C. Harding · a7787c1c · May 16, 2026 · 57 filesMessage 68 · AdequateInformational 15Details
Commit message · Tobin C. Harding

Remove the unstable hex-conservative dependency

BOOM! Now that `hex 1.1.0` is out we can remove the unstable dep. This
is a breaking change all the way down the stack and will require
re-releases.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive pathsigning or wallet path
AI analysis · Informational 15/100

This commit is a routine dependency cleanup. The project previously had to use two different versions of the same hex-encoding helper library (one stable, one unstable preview) because a needed feature was only available in the unstable version. Now that the stable library released version 1.1.0 with that feature, the commit removes the unstable dependency and switches everything to the single stable version. It is not a security fix and does not change how the software behaves to users.

Lower-priorityUpdate the API text filesby Tobin C. Harding · 8c786af7 · May 16, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Tobin C. Harding

Update the API text files

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit removes one line from a generated API text file that lists public re-exports. The removed line was for an unstable/internal feature re-export (`hex_unstable`). There is no code change, no security fix, and no functional behavior change. It is purely a documentation or generated-file maintenance update.

Lower-priorityp2p: calculate v1 checksum on original payloadby Nick Johnson · 7fed10c5 · May 15, 2026 · 1 fileMessage 90 · StrongModerate 62Details
Commit message · Nick Johnson

p2p: calculate v1 checksum on original payload

A differential fuzz test found a malformed v1 message which *passed*
its checksum validation due to the checksum being calculated on a
re-encoded payload instead of the raw payload bytes. Due to wiggle room
in the p2p spec, re-encoded payloads can differ from the raw bytes which
results in a different checksum.

This change calculates the checksum on the fly agianst the raw payload
bytes to avoid the ambiguity.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
Why it was queued
fuzzing or regression evidence
AI analysis · Moderate 62/100

This commit fixes a bug in how Bitcoin peer-to-peer network messages are validated. The software was checking message checksums against a re-encoded version of the message payload rather than the original bytes received over the network. Because the protocol allows some wiggle room in encoding, a re-encoded payload can have a different checksum than the original raw bytes. This meant a malformed message could pass checksum validation when it should have been rejected. The fix computes the checksum directly from the raw bytes as they arrive, removing that ambiguity.

Lower-priorityp2p: test for calculate v1 checksum on original payloadby Nick Johnson · 557a7e42 · May 15, 2026 · 1 fileMessage 60 · AdequateInformational 11Details
Commit message · Nick Johnson

p2p: test for calculate v1 checksum on original payload

60/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 11/100

This commit only adds a new unit test. It does not change any production code. The test checks that a malformed Bitcoin P2P v1 message with a non-standard boolean encoding and a bad checksum is correctly rejected. Because no actual code behavior is changed, this commit by itself does not fix or introduce a security issue.

Lower-priorityp2p: Add `sendtxrcncl` to network messagesby rustaceanrob · f0be3481 · May 15, 2026 · 3 filesMessage 68 · AdequateInformational 18Details
Commit message · rustaceanrob

p2p: Add `sendtxrcncl` to network messages

`sendtxrcncl` has not been assigned a v2 shortID.

ref: https://github.com/bitcoin/bitcoin/blob/master/src/net.cpp#L920

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 18/100

This commit adds support for a new Bitcoin peer-to-peer message type called `sendtxrcncl` (transaction reconciliation, part of the Erlay protocol). It is a routine protocol feature addition: it wires up encoding and decoding for the new message so the library can send and receive it. There is no indication in the commit of a security bug, fix, or vulnerability.

Lower-priorityp2p: Add erlay message moduleby rustaceanrob · 87b49795 · May 15, 2026 · 2 filesMessage 76 · AdequateInformational 18Details
Commit message · rustaceanrob

p2p: Add erlay message module

Although full erlay support has not been implemented, Bitcoin Core nodes
can still advertise support for erlay as a configuration option. We
should support decoding this message.

The version is private as anything besides version one is nonsense.

ref: https://github.com/bitcoin/bitcoin/blob/master/src/net_processing.cpp#L3736

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 18/100

This commit adds support for decoding a new Bitcoin peer-to-peer network message called 'sendtxrcncl', which is part of an upcoming feature called Erlay. It does not change any existing behavior; it simply lets the library recognize and parse this message type. There is no indication this introduces a security problem.

Lower-priorityfuzz: Fix `hashes_json` roundtrip checkby Ismail Daif · 3f63e995 · May 15, 2026 · 1 fileMessage 55 · ThinInformational 15Details
Commit message · Ismail Daif

fuzz: Fix `hashes_json` roundtrip check

55/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit fixes a fuzz test (an automated correctness test) in the rust-bitcoin project. The test previously compared raw input bytes to re-serialized JSON bytes, which can fail for harmless reasons like whitespace or key ordering. The fix compares the parsed Rust data structures instead, which is the correct way to verify round-trip behavior. This is a test-only change and does not affect any production code or user-facing behavior.

Security candidatehashes: Add `Arbitrary` impl for `Hmac`by Ismail Daif · 3715b605 · May 15, 2026 · 2 filesMessage 45 · ThinInformational 16Details
Commit message · Ismail Daif

hashes: Add `Arbitrary` impl for `Hmac`

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
cryptography-sensitive path
AI analysis · Informational 16/100

This commit adds a standard trait implementation that lets the Hmac type be used with property-testing tools. It is a routine feature addition, not a security fix or vulnerability.

Lower-priorityfuzz: Add `hashes_arbitrary_json` targetby Ismail Daif · 1f54f16d · May 15, 2026 · 3 filesMessage 45 · ThinInformational 15Details
Commit message · Ismail Daif

fuzz: Add `hashes_arbitrary_json` target

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit adds a new automated fuzz-testing target for the project's hash types. It does not change any production code, fix a bug, or alter behavior visible to users. It is purely a testing/infrastructure addition.

Lower-priorityUse collect_seq when serializing Vec<T>by Abeeujah · 3e1e00ce · May 14, 2026 · 4 filesMessage 68 · AdequateInformational 15Details
Commit message · Abeeujah

Use collect_seq when serializing Vec<T>

Prefer `collect_seq` implementation over the serialize_seq and the
manual loop `serialize_element` call to serialize all elements in
the vector.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a routine code cleanup in the rust-bitcoin library. It replaces several hand-written loops that serialize lists of values with a single standard helper called collect_seq. There is no functional change intended, and nothing in the commit suggests a security fix or vulnerability.

Lower-priorityfuzz: Remove allocations in roundtrip targetsby Mitchell Bagot · 953ef384 · May 14, 2026 · 1 fileMessage 78 · AdequateInformational 15Details
Commit message · Mitchell Bagot

fuzz: Remove allocations in roundtrip targets

The roundtrip fuzz targets rely on functions in lib.rs that decode,
encode and decode again. In this process, a Vec allocation is made
as an intermediate step to hold the encoded object. Since the encoded
data is ignored, this allocation can instead be replaced by a direct
push of the encoder chunks into the decoder.

Replace Vec allocation with direct writes from encoder to decoder in
roundtrip fuzz targets.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit is a performance improvement for internal fuzz testing code. It removes an unnecessary memory allocation when testing that data can be encoded and decoded correctly. There is no security vulnerability or fix here.

Security candidateMake to_inner on public key types pub(super)by Mitchell Bagot · 1d95006d · May 13, 2026 · 2 filesMessage 68 · AdequateInformational 23Details
Commit message · Mitchell Bagot

Make to_inner on public key types pub(super)

The to_inner function was introduced as a stop-gap to eliminate the
public access to inner secp types on the public key types. Now that
the key types have been adjusted such that inner access is no longer
needed outside of crypto, these conversion methods can be made private.

Make to_inner on all public key types pub(super).

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 23/100

This commit narrows the visibility of internal helper methods named to_inner on Bitcoin public-key types. Previously any outside code could call these methods to extract the raw underlying secp256k1 key objects; now only code inside the same module can do so. This is a defensive encapsulation change that reduces the public API surface and makes future misuse or accidental exposure of internal cryptographic details less likely. It is not a fix for an active vulnerability.

Security candidateReplace as_inner accessor on XOnlyPublicKey with to_innerby Mitchell Bagot · 0cb19c0c · May 13, 2026 · 1 fileMessage 73 · AdequateInformational 18Details
Commit message · Mitchell Bagot

Replace as_inner accessor on XOnlyPublicKey with to_inner

Access to the inner types for the key wrappers should be uniform.
Specifically, for the public Copy types, inner access should be by
value. To achieve this XOnlyPublicKey::as_inner must be removed.

Remove XOnlyPublicKey::as_inner.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 18/100

This commit is a routine API cleanup in the rust-bitcoin crypto library. It removes a method called as_inner that returned a reference to the underlying key data, and replaces internal uses with to_inner, which returns the key by value. The underlying key type is small and cheap to copy, so this is a consistency improvement, not a security fix. There is no indication this change addresses a vulnerability.

Security candidatehashes: capitalize hash algorithm namesby jrakibi · 3263f1ec · May 12, 2026 · 14 filesMessage 45 · ThinInformational 15Details
Commit message · jrakibi

hashes: capitalize hash algorithm names

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
cryptography-sensitive path
AI analysis · Informational 15/100

This commit only changes the capitalization of hash algorithm names in comments and documentation strings (for example, 'sha256' becomes 'SHA256' and 'sha256d' becomes 'SHA256d'). No program logic, code behavior, or security properties were modified.

Security candidatehashes: Fix doc typosby jrakibi · d25913a5 · May 12, 2026 · 7 filesMessage 43 · ThinInformational 15Details
Commit message · jrakibi

hashes: Fix doc typos

- Add missing full stop
- Capitalize first words in doc comments

43/100 · ThinMessage clarity
✓ Subject identifies a change✓ Provides an explanatory body
Why it was queued
cryptography-sensitive path
AI analysis · Informational 15/100

This commit only fixes typos and formatting in documentation comments and test file comments. No code behavior changes.

Lower-prioritytaproot-primitives: Remove crypto depby Mitchell Bagot · 9eb2ba68 · May 12, 2026 · 3 filesMessage 45 · ThinInformational 15Details
Commit message · Mitchell Bagot

taproot-primitives: Remove crypto dep

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit removes an unused internal dependency called bitcoin-crypto from the taproot-primitives crate. It only changes package metadata and lock files; no actual code is modified. There is no security issue here.

Security candidateMove from_key_and_merkle_root to extension traitby Mitchell Bagot · bbe0a0b1 · May 12, 2026 · 3 filesMessage 68 · AdequateInformational 18Details
Commit message · Mitchell Bagot

Move from_key_and_merkle_root to extension trait

The from_key_and_merkle_root method on the TapTweakHash type is the
only part of the taproot-primitives crate that causes a dependency on
the crypto crate. By moving this back to bitcoin, we can remove the
dependency on crypto, allows these types to stabilise in primitives
without waiting on crypto to stabilise.

Move from_key_and_merkle_root to new extension trait TapTweakHashExt in
bitcoin.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 18/100

This commit is a routine code reorganization. It moves one function, `from_key_and_merkle_root`, out of a low-level crate (`taproot-primitives`) and into a higher-level crate (`bitcoin`) as an 'extension trait.' The goal is to remove an internal dependency so the low-level crate can stabilize sooner. The actual computation performed by the function is unchanged.

Lower-priorityhashes: Add commented out dyn compatible testby Tobin C. Harding · 43757fcd · May 12, 2026 · 1 fileMessage 78 · AdequateInformational 15Details
Commit message · Tobin C. Harding

hashes: Add commented out dyn compatible test

C-OBJECT is about object safety. None of the `hashes` traits are
object safe. Add a commented out test so I (and no-one else) has to
look at this again.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only adds a test file containing fully commented-out code. It documents that certain hashing traits in the library are not 'dyn compatible' (a Rust technical term meaning they cannot be used as trait objects). No actual code behavior changes, no bug is fixed, and no security issue is introduced.

Lower-priorityhashes: Remove unnecessary cloneby Tobin C. Harding · bf33c3b4 · May 12, 2026 · 1 fileMessage 70 · AdequateInformational 15Details
Commit message · Tobin C. Harding

hashes: Remove unnecessary clone

No need to clone. The `State` struct is `Copy` because all fields are
`Copy` (I _think_).

We could remove the local var all together but what ever.

70/100 · AdequateMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This is a tiny code cleanup in a Rust hashing library. It removes an unnecessary `.clone()` call because the underlying data type can be copied automatically. There is no security issue here.

Lower-priorityhashes: Grab point release changelogsby Tobin C. Harding · cb7f6252 · May 12, 2026 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · Tobin C. Harding

hashes: Grab point release changelogs

Two trivial changelogs were missing, grab them.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only adds two missing changelog entries to a documentation file (hashes/CHANGELOG.md). It records that previous point releases removed a documentation configuration flag called `doc_auto_cfg`. No code, build scripts, tests, or dependencies were changed. There is no security relevance.

AI review queuedp2p: Remove `bitcoin` dependencyby rustaceanrob · 3a46e0a6 · May 11, 2026 · 4 filesMessage 58 · ThinInformational 15Details
Commit message · rustaceanrob

p2p: Remove `bitcoin` dependency

`hex` is brought in from `primitives` as it is an unconditional
dependency. `arbitrary` is brought in from `primitives` as opposed to
`bitcoin`. `primitives` and `encoding` need `alloc`. One doc line is updated.

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
Why it was queued
second-pass: broader security terminology
AI analysis · Informational 15/100

This is a routine internal refactoring commit in the rust-bitcoin project. It removes a direct dependency on the main 'bitcoin' crate from the smaller 'p2p' (peer-to-peer messages) crate and instead pulls in the needed features from more focused sub-crates. The only code change is updating a documentation example to use a different decoding function. There is no security-relevant change visible in the diff.

AI review queuedUse stacked attributes over #[cfg(all(...))]by Mitchell Bagot · f5c09645 · May 11, 2026 · 2 filesMessage 80 · StrongInformational 15Details
Commit message · Mitchell Bagot

Use stacked attributes over #[cfg(all(...))]

Per our policy, feature gates should use stacked attributes instead
of #[cfg(all(...))]. Presumably due to changes at the same time as
this policy was introduced, there remain a few uses of the old style
in primitives.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a purely cosmetic code-style change. It rewrites some Rust feature-gate conditions from one allowed syntax to another preferred syntax, with no change to which features enable which code. There is no security relevance.