RB
← All projectsRust Bitcoin

rust-bitcoin

Rust library for Bitcoin data structures, serialization, consensus encoding, and scripts.

BitcoinCryptographic librariesNormal
Repository coverage

2310 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

531security candidates510second-pass queue2204AI analyses
136commits · 30 days
269commits · 60 days
1108commits · 180 days
2035commits · 365 days
Backfill bands
Aug 5 → Feb 6787 seen32 candidatesComplete
Feb 6 → Jun 6878 seen53 candidatesComplete
Jun 6 → Jul 6211 seen15 candidatesComplete
Jul 6 → Aug 5184 seen2 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

66/100 average clarity
507Strong · 80–100
1085Adequate · 60–79
567Thin · 40–59
151Opaque · 0–39
20security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Andrew Poelstra22878155290
Mitchell Bagot649193645068
Tobin C. Harding41566410063
jrakibi944994068
Nick Johnson19121190060
Jamil Lambert, PhD11919116061
satsfy (Renato Britto)381527066
Fmt Bot331431045
Trevor Arjeski111111069
Shing Him Ng31731056
Martin Habovstiak30628068
Ismail Daif22622050
Analysis record

Published AI watches

Last scanned 52 minutes ago

Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6947: build(deps): bump cargo-bins/cargo-binstall from 1.21.0 to 1.21.1

This commit updates the version of a helper tool (cargo-binstall) used only inside GitHub Actions automation. It is a routine dependency bump by Dependabot and does not change any code that ships to users. There is no indication of a secur…

c1be49cbby Andrew Poelstra+2−22 files
No security note in commit
High 70 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6919: Sanitize serde size hints before allocating

This commit fixes a denial-of-service weakness in how the library deserializes lists of Bitcoin data (witnesses, amounts, fee rates) from untrusted input. Before the fix, a few bytes of attacker-controlled data could claim a list would con…

Untrusted serde size hint fed directly into Vec::with_capacityPotential memory exhaustion / OOM kill from small malicious inputDenial-of-service vector in deserialization paths
55ddbc0cby Andrew Poelstra+88−105 files
Vendor flagged security relevance
Moderate 60 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6945: bitcoin: handle OP_CODESEPARATOR in legacy

This commit fixes how the Rust Bitcoin library calculates old-style (legacy) transaction signatures when the spending script contains a special opcode called OP_CODESEPARATOR. Previously the library did not handle this opcode at all, which…

Protocol correctness fix for legacy sighash serializationOP_CODESEPARATOR handling added to match Bitcoin Core consensus behaviorPreviously omitted test vectors restored, indicating prior non-compliance
5b815281by Andrew Poelstra+600−3093 files
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6948: build(deps): bump taiki-e/install-action from 2.83.2 to 2.85.4

This is a routine update by Dependabot to the version of a third-party GitHub Action used in the project's automated testing workflows. The change only affects internal continuous integration (CI) scripts, not the actual Bitcoin library co…

d1431904by Andrew Poelstra+2−22 files
No security note in commit
Low 33 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6946: Fix integer overflow in `get_array`

This commit fixes a small but real bug in a Rust helper that reads fixed-size chunks from a data slice. The helper was supposed to safely return 'nothing' when asked to read past the end of the data, but it accidentally added two numbers t…

Integer overflow in bounds-checking helperContract violation: method documented to return None on out-of-bounds access could panic insteadDebug-build panic (denial of service) possible
c6e80843by Andrew Poelstra+2−11 file
Vendor flagged security relevance
Moderate 62 AI analysisMessage 73 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Fix integer overflow in `get_array`

This commit fixes a bug in a Rust helper method called `get_array`, which is meant to safely read a fixed-size chunk from a slice and return nothing if the requested range is out of bounds. The bug was that the code added the caller's offs…

Integer overflow in bounds calculationPotential panic due to violated internal length expectationCaller-controlled arithmetic used for memory access bounds
56fb1287by Martin Habovstiak+2−11 file
Vendor flagged security relevance
High 71 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6915: primitives: Fix `Witness` handling of oversized items

This commit fixes a bug in how the Rust Bitcoin library counts and compares transaction witness data when a witness contains an oversized item. Previously, several functions relied on an iterator that silently skips oversized items, causin…

Inconsistent serialization/iterator behavior for oversized witness itemswtxid collision risk between transactions differing only in oversized witness bytesIncorrect witness equality for oversized single-item stacks
e1ed5884by Andrew Poelstra+106−273 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6922: Use `try_fold` instead of `fold` in `Sum` impl

This is a code-quality and performance improvement, not a security fix. It changes how the library adds up lists of Bitcoin amounts so that it stops early once an overflow is detected, rather than continuing to process the rest of the list…

No security-relevant signal in commit message or diffRefactor preserves overflow-checking behavior (short-circuits instead of continuing)New API method `NumOpResult::from_result` is a pure inverse of existing `into_result`
86e4d5daby Andrew Poelstra+60−562 files
No security note in commit
Moderate 52 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6893: units: Reject malformed amount strings

This update fixes a bug in how the library reads Bitcoin amount strings like '1.5 BTC'. Previously, certain malformed inputs such as '.', '._', '1_', '1_.0', and '1._0' were incorrectly accepted and treated as valid amounts (often zero), i…

Input validation bypass in amount parserMalformed strings silently parsed as zero or ordinary amountsUnderscore separator placement not enforced
fcb14622by Andrew Poelstra+88−343 files
Vendor flagged security relevance
Low 48 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6921: units: fix div_by_fee_rate_ceil precision

This commit fixes a rounding bug in how the rust-bitcoin library calculates the minimum transaction weight needed to pay a given fee at a given fee rate. The old code rounded the fee rate up too early, which could produce a weight slightly…

Incorrect fee-weight calculation due to premature integer roundingPotential transaction fee shortfall when using div_by_fee_rate_ceilOverflow protection added for Amount::MAX * 4_000_000 intermediate value
b31212e0by Andrew Poelstra+38−82 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6898: Release tracking PR: `consensus-encoding 1.3.0`

This is a routine release-management commit that bumps the version number of the `bitcoin-consensus-encoding` crate from 1.2.0 to 1.3.0 and updates lock files accordingly. It contains no code changes that fix or introduce a security issue.…

0cfc7908by Andrew Poelstra+37−349 files
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6909: build(deps): bump actions/labeler from 6.2.0 to 7.0.0

This commit updates a GitHub Actions automation tool (actions/labeler) used to automatically tag pull requests with labels. It is a routine dependency version bump from 6.2.0 to 7.0.0, with no indication of a security fix or vulnerability.…

4ed7c068by Andrew Poelstra+1−11 file
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6910: build(deps): bump actions/checkout from 7.0.0 to 7.0.1

This commit is a routine update to the GitHub Actions checkout tool used by the project's automated workflows. It only changes version numbers in configuration files and does not alter the actual Bitcoin library code that users run. There …

328c4ae9by Andrew Poelstra+37−3717 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6911: build(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0

This commit updates a GitHub Actions helper used to install a Python tool called uv, which runs the zizmor security scanner. The change only bumps the pinned version of the helper from 8.3.2 to 9.0.0. The new version's release notes mentio…

No security-relevant signals in commit or upstream release notesDependency bump in CI only, not in library codeNo CVE or advisory referenced
67600795by Andrew Poelstra+2−22 files
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6912: build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3

This is a routine Dependabot update that changes the pinned version of GitHub's official CodeQL upload-sarif action from 4.37.0 to 4.37.3 in a single CI workflow. The action only uploads static analysis results to GitHub; it does not touch…

b51cec63by Andrew Poelstra+1−11 file
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6913: build(deps): bump dtolnay/rust-toolchain from 6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 to 02cb101ec7c40f2c49e1d9714d64511d8e1b74de

This is a routine update to a GitHub Actions helper used to install Rust during automated testing. It only changes the pinned version of the dtolnay/rust-toolchain action in workflow files. There is no change to the actual rust-bitcoin lib…

90330d15by Andrew Poelstra+8−84 files
No security note in commit
Informational 20 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6906: consensus_encoding, primitives: expose exact encoding size for block and transaction

This commit adds a way to ask, in advance, exactly how many bytes a Bitcoin block or transaction will take when serialized. It is a feature addition for the library's encoding system, not a fix for a vulnerability. There is no indication i…

No security-relevant signals in commit message or diffFeature addition: expose exact encoded sizeNo mention of vulnerability, CVE, bug bounty, or security report
1a365d53by Andrew Poelstra+129−1068 files
No security note in commit
Informational 15 AI analysisMessage 88 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

build(deps): bump dtolnay/rust-toolchain

This is a routine update by Dependabot that changes which version of a popular GitHub Action (dtolnay/rust-toolchain) is used to install Rust in automated CI workflows. The commit only updates pinned commit hashes in workflow files; it doe…

a31e0b0eby dependabot[bot]+8−84 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

build(deps): bump github/codeql-action/upload-sarif

This is a routine patch-version update of a GitHub-maintained action used only to upload static-analysis results (SARIF files) from a scheduled CI job. The change does not touch any project source code, cryptographic logic, or user-facing …

2cac6e38by dependabot[bot]+1−11 file
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

build(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0

This is a routine automated update by Dependabot that changes the pinned version of a GitHub Action used to install a Python tool called 'uv' in two workflow files. The new version is a major release of the setup-uv action itself, but the …

7d7e7269by dependabot[bot]+2−22 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritytest(p2p): Replace encoding logic in `bip152`by rustaceanrob · de2357b4 · Apr 23, 2026 · 1 fileMessage 67 · AdequateInformational 15Details
Commit message · rustaceanrob

test(p2p): Replace encoding logic in `bip152`

67/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This is a small test-only change that swaps one internal encoding helper for another inside the BIP152 test module. It does not touch production code, network handling, or consensus logic, and there is no indication it fixes or introduces a security issue.

Lower-prioritytest(p2p): Replace encoding logic in `message_network`by rustaceanrob · e0a4c5ce · Apr 23, 2026 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · rustaceanrob

test(p2p): Replace encoding logic in `message_network`

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This is a small test-only change that swaps out one internal encoding helper for another equivalent one inside unit tests. It does not touch production code, network handling, or any behavior visible to users.

Lower-prioritytaproot-primitives: Add crate externs for public API typesby Mitchell Bagot · f80806a7 · Apr 23, 2026 · 1 fileMessage 73 · AdequateInformational 15Details
Commit message · Mitchell Bagot

taproot-primitives: Add crate externs for public API types

Whenever a crate has types in its public API that come from another
crate, that other crate should be re-exported from the crate root.
taproot-primitives uses types from arbitrary, hashes, secp and serde
in its public API, and thus all of these should be re-exported.

Re-export arbitrary, hashes, secp256k1 and serde from the crate root.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a routine Rust crate maintenance change. It makes several underlying libraries publicly visible from the taproot-primitives crate root so that downstream users can refer to those types more conveniently. There is no security issue here.

Security candidatecrypto: Remove bitcoin-io dependencyby Mitchell Bagot · 9f5ece75 · Apr 23, 2026 · 4 filesMessage 73 · AdequateInformational 15Details
Commit message · Mitchell Bagot

crypto: Remove bitcoin-io dependency

With the removal of the io-dependent functions from the key and
signature types, the bitcoin-io dependency can be entirely dropped from
the crypto crate.

Remove bitcoin-io dependency from manifest and update lock files.
Remove io re-export from crate root.

73/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Names security-relevant behavior explicitly
Why it was queued
signing boundarycryptography-sensitive path
AI analysis · Informational 15/100

This commit is a routine cleanup that removes an unused dependency called bitcoin-io from the crypto crate. It only touches package metadata and lock files, not any code that handles keys, signatures, or user data. There is no security issue visible in this change.

Security candidateRemove io methods on public key typesby Mitchell Bagot · dc6c4888 · Apr 23, 2026 · 2 filesMessage 78 · AdequateInformational 17Details
Commit message · Mitchell Bagot

Remove io methods on public key types

The read_from and write_into functions on the public key types rely on
the bitcoin-io Read and Write traits. Since we want to remove the
dependence on io for the crypto crate, these methods must also be
removed. With the Serialized* types, the write_into methods are trivial
to replace inline.

Remove read_from and write_into methods from public key types and test
case for them.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
cryptography-sensitive pathsigning or wallet path
AI analysis · Informational 17/100

This commit removes convenience methods for reading and writing public keys from/to byte streams in the rust-bitcoin crypto crate. It is a routine API cleanup to reduce dependency on the bitcoin-io crate, not a security fix. There is no evidence in the commit or supplied references that this change addresses a vulnerability.

Lower-priorityUpdate the API text filesby Tobin C. Harding · 8c0c2998 · Apr 22, 2026 · 3 filesMessage 45 · ThinInformational 15Details
Commit message · Tobin C. Harding

Update the API text files

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only updates three generated API text snapshot files to reflect that a function now takes a mutable reference to its engine argument instead of taking ownership. There is no actual source code change in the commit, and nothing in the commit message or diff indicates a security issue.

Security candidatehashes: change engine parameter to be mutable referenceby yancy · 688cf1e7 · Apr 22, 2026 · 3 filesMessage 73 · AdequateInformational 18Details
Commit message · yancy

hashes: change engine parameter to be mutable reference

Allow engine parameter to be less restrictive in use. By changing the
parameter to `&mut`, the calling function no longer needs give up
ownership of engine.

The return value is removed since the caller can simply use existing
ownership of variable instead of the return value.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 18/100

This is a routine internal API cleanup in the rust-bitcoin hashing library. A helper function that feeds data into a hash calculator is changed so callers pass in the calculator by mutable reference instead of handing it over and getting it back. No security vulnerability is present in the diff; it is a usability and ownership-style refactor.

Lower-priorityCorrect `emoty` typo to `empty`by Abeeujah · 4371ac21 · Apr 22, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Abeeujah

Correct `emoty` typo to `empty`

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit fixes a spelling mistake in an error message: 'emoty' was corrected to 'empty'. It does not change any program logic, behavior, or security properties.

Lower-prioritySkip Encode/Decode Mutations that hangby Abeeujah · 1d89db99 · Apr 22, 2026 · 1 fileMessage 68 · AdequateInformational 15Details
Commit message · Abeeujah

Skip Encode/Decode Mutations that hang

Generating mutants for Encode/Decode `advance` and `push_bytes` methods
causes an infinite loop and forcing the generated mutant to TIMEOUT.

This patch adds the skip directive in the mutants configuration file
for cargo-mutants to skip mutating the code path when generating
mutants.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This change only updates the project's mutation-testing configuration file. It tells the cargo-mutants tool to skip generating certain test mutants for encoding/decoding methods because those artificial mutations would make the test suite hang. It does not change any production code, protocol behavior, or security-relevant logic.

Lower-priorityImplement TestNode to test MerkleNodeby Abeeujah · ff86b5ad · Apr 22, 2026 · 1 fileMessage 78 · AdequateInformational 15Details
Commit message · Abeeujah

Implement TestNode to test MerkleNode

MerkleNode trait has a default impl for `calculate_root` function,
this default impl is getting overriden by `WitnessMerkleNode` and
`TxMerkleNode` which uses `calculate_root_batched` on `std+x86_64`
targets, causing the default `calculate_root` impl to be missed
when mutants are generated against it.

TestNode is a test only implementation which uses the default
MerkleNode `calculate_root` function, to provide test coverage,
ensuring no mutants generated against it was missed.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only adds new test code. It introduces a fake test-only Merkle node type so the project's mutation-testing tool can exercise a default trait method that real node types override on common CPU platforms. There is no change to production code, no bug fix, and no security-relevant behavior change.

Security candidatehashes: Add 4-way dispatcherby jrakibi · e26ee477 · Apr 22, 2026 · 1 fileMessage 60 · AdequateInformational 17Details
Commit message · jrakibi

hashes: Add 4-way dispatcher

add x86 sha256d dispatcher that handles 4-way SSE4.1

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
cryptography-sensitive path
AI analysis · Informational 17/100

This commit adds a new performance optimization for SHA-256 hashing on modern x86 processors. It introduces a code path that processes four blocks at once using SSE4.1 instructions when available. There is no indication in the commit that this fixes a security vulnerability; it appears to be a routine performance improvement.

Security candidatehashes: fold 4-way SSE4.1 SHA256d into round! macroby jrakibi · d2f8f6f5 · Apr 22, 2026 · 1 fileMessage 73 · AdequateInformational 18Details
Commit message · jrakibi

hashes: fold 4-way SSE4.1 SHA256d into round! macro

use a round! macro to cut ~1000 lines from the unrolled version.
each round becomes a single round!(...) call. it almost matches Core
line-by-line, so it's easy to compare and review against sha256_sse41.cpp.

refactor, no behavior change.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 18/100

This commit is a code cleanup in the Bitcoin library's SHA-256 hashing code. It replaces roughly 1,000 lines of manually repeated calculation steps with a few short macros that generate the same steps automatically. The author explicitly calls it a refactor with no behavior change, and the constants and arithmetic operations appear unchanged.

Security candidatehashes: Add 4-way SSE4.1 SHA256d for 64-byte inputby jrakibi · ea0f3035 · Apr 22, 2026 · 2 filesMessage 73 · AdequateInformational 16Details
Commit message · jrakibi

hashes: Add 4-way SSE4.1 SHA256d for 64-byte input

add the three transforms for sha256(sha256(64_bytes)) using SSE4.1 SIMD.

SSE4.1 uses 128-bit registers, so we can pack four 32-bit words into
each register and compute 4 independent hashes in parallel with a
single SIMD op.

- Transforms 1 & 2 compute the inner `sha256(64_bytes)`.
- Transform 3 computes sha256(output_of_T1_and_T2).

rounds are fully unrolled (we will use a round! macro to fold them
in the next patch).

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 16/100

This commit adds a new, faster way to calculate SHA256d hashes for 64-byte inputs on modern Intel/AMD processors using SSE4.1 CPU instructions. It is a pure performance optimization and does not appear to fix or introduce a security vulnerability based on the code shown. However, because it is new cryptographic code, any bug in it could in principle produce wrong hash results, which would be a correctness issue rather than a direct security flaw.

Lower-prioritytaproot-primitives: Correctly gate alloc on alloc featureby Mitchell Bagot · 4b8f4e9f · Apr 22, 2026 · 1 fileMessage 73 · AdequateInformational 17Details
Commit message · Mitchell Bagot

taproot-primitives: Correctly gate alloc on alloc feature

At the moment, the taproot-primitives crate always externs alloc,
even for no-alloc builds. This means that certain alloc types are
used even for no-alloc builds, which will break builds that actually
have no alloc available.

Correctly gate alloc extern behind alloc feature and gate macro
invocations that require alloc.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 17/100

This is a build-system fix for a Rust crate that supports both memory-allocator and no-allocator environments. The crate was always pulling in the standard memory allocator even when a user explicitly requested a no-allocator build, which would cause compilation to fail on platforms without an allocator. The patch simply adds the correct on/off switch so the allocator is only used when the corresponding feature is enabled. There is no runtime security vulnerability or exploit here.

Lower-prioritytaproot-primitives: Add hex feature and correctly gate hex usageby Mitchell Bagot · 34807d70 · Apr 22, 2026 · 3 filesMessage 73 · AdequateInformational 19Details
Commit message · Mitchell Bagot

taproot-primitives: Add hex feature and correctly gate hex usage

While taproot-primitives itself doesn't directly implement
functionality using hex-conservative, it does so through macros from
hashes. As with all other crates upstream of bitcoin, inclusion of
hex related functionality should be gated behind a hex feature.

Introduce hex feature. Gate all hex usage behind the feature.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 19/100

This commit is a feature-gating cleanup, not a fix for an active security flaw. The taproot-primitives crate was always enabling hex (base-16 string) support for its hash types, even when downstream users did not ask for it. The change adds an explicit 'hex' feature, turns it off by default, and makes the bitcoin crate request it explicitly. This gives users more control and avoids pulling in unneeded functionality, but it does not patch a vulnerability that can be directly exploited.

Security candidatecrypto: Adjust SerializedLegacyPublicKey docsby Mitchell Bagot · 16324919 · Apr 22, 2026 · 1 fileMessage 58 · ThinInformational 15Details
Commit message · Mitchell Bagot

crypto: Adjust SerializedLegacyPublicKey docs

The SerializedLegacyPublicKey docs don't mention the maximum size or
the lack of allocations like the ecdsa::SerializedSignature docs do.

Adjust wording of docs to mention lack of allocation and max size of
65 bytes.

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
Why it was queued
signing boundarycryptography-sensitive path
AI analysis · Informational 15/100

This commit only changes documentation wording for a Rust Bitcoin data type. It adds a note that the serialized legacy public key type avoids heap allocation and has a maximum size of 65 bytes. No code behavior was altered.

Security candidateRemove io write helpers from ecdsa signaturesby Mitchell Bagot · bffd1b0f · Apr 22, 2026 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · Mitchell Bagot

Remove io write helpers from ecdsa signatures

In the ecdsa module, the SerializedSignature and Signature types have
helper methods for writing to bitcoin-io Write objects. Since we want
to remove the io dependency entirely, and the SerializedSignature can
already be used in a similar way to a slice, there's no point to
retaining them.

Remove Signature::serialize_to_writer and SerializedSignature::write_to.
Adjust existing io test case to use std traits.

83/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Names security-relevant behavior explicitly
Why it was queued
signing boundarycryptography-sensitive path
AI analysis · Informational 15/100

This commit removes two helper methods that wrote ECDSA signatures to a custom I/O writer. It is a straightforward API cleanup to drop a dependency, not a security fix. There is no evidence of a vulnerability being patched.

Security candidateDon't abuse psbt Deserializeby Tobin C. Harding · cc1d5919 · Apr 22, 2026 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · Tobin C. Harding

Don't abuse psbt Deserialize

I'm not sure what is the intention of this code or exactly how the
derives are working in the `taproot` module because we are importing
`psbt::serialize::Deserialize` and then using it in `serde` derives?

Also the `TapTree` arbitrary stuff is a bit odd, that is what led me
here while I was attempting to delete the `psbt` module.

So, I don't know if this is a bug or an internal change? Introduced in
commit: `37c9fce2a684 Implement `Arbitrary` for psbt types`.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
Why it was queued
signing boundary
AI analysis · Informational 15/100

This commit is a small internal cleanup in the rust-bitcoin library. It stops using a PSBT-specific deserialization helper to build test-only 'Arbitrary' instances of TapTree, and instead builds the tree directly from its internal NodeInfo. It also switches serde derives to use the proper serde::Deserialize trait. There is no direct evidence this fixes an exploitable security bug, but it removes a confusing and potentially incorrect reuse of PSBT serialization logic outside the PSBT module.

Lower-priorityAnnotate qualifying functions with #[must_use]by Abeeujah · afd78125 · Apr 21, 2026 · 2 filesMessage 68 · AdequateInformational 19Details
Commit message · Abeeujah

Annotate qualifying functions with #[must_use]

These functions return values without side effects; ignoring the return
value is likely unintended. Adding #[must_use] helps catch such cases
at compile time.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 19/100

This commit adds Rust compiler hints (#[must_use]) to five small helper functions that simply convert numbers from one type to another or create an empty container. The change only produces new compiler warnings when a caller ignores the returned value; it does not change how any existing code behaves at runtime and does not fix an active security bug.

Lower-priorityFix Pedantic Clippy Lintsby Abeeujah · e9cc0fc7 · Apr 21, 2026 · 3 filesMessage 70 · AdequateInformational 15Details
Commit message · Abeeujah

Fix Pedantic Clippy Lints

- Drop unnecessary Debug print for `Path`

Use Display implementation of `Path` type instead of Debug print,
this is the recommended usage for types with a more appropriate
Display implementation or specialized method.

Path has a `display` method for writing to stdout, and by default,
the clippy rule `clippy::unnecessary_debug_formatting` would trigger
if it is being `Debug` printed instead, this patch calls the display
method, the approach recommended by the lint.

- Add trailing semicolon to `hash` fn to ensure constant formatting.
- Remove unnecessary trailing semi-colon after an if block
- Cast `i32` to `usize` via the `try_from` method instead of `as` conversion.

70/100 · AdequateMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit only fixes minor style warnings reported by the Clippy linter. It changes how a file path is printed in a build script, adds a missing semicolon in a hashing function, removes an unnecessary semicolon after an if block, and replaces one numeric type cast with a safer conversion in a unit test. None of these changes fix a security vulnerability.

AI review queuedImplement Consensus Encoding for V2NetworkMessageby Abeeujah · 9b6a6402 · Apr 21, 2026 · 1 fileMessage 68 · AdequateLow 29Details
Commit message · Abeeujah

Implement Consensus Encoding for V2NetworkMessage

Implement new consensus encoding traits for the V2NetworkMessage
struct, to be sent as a message across the Bitcoin Network P2P.

This is part of the ongoing attempt to drop bitcoin as a dependency
from `bitcoin-p2p-messages` crate.

Constructs the Encoder and Decoder types for the encoding and
deserialization of the V2NetworkMessage, introduces the
`V2NetworkMessageDecoderError` to report errors encountered while
enc/decoding the message.

Co-authored-by: rustaceanrob <rob.netzke@gmail.com>

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
second-pass: broader security terminology
AI analysis · Low 29/100

This commit adds new encoding and decoding logic for Bitcoin P2P v2 network messages in the rust-bitcoin library. It is a feature/refactoring change that introduces a new way to serialize and deserialize v2 protocol messages. There is no direct evidence in the commit that this fixes a known security vulnerability, but any new parser for network-facing data is a potential source of bugs such as crashes, denial of service, or memory issues if it mishandles malformed input.

AI review queuedunits: scrub encoder/decoder layoutby Renato Britto · d06af66f · Apr 21, 2026 · 6 filesMessage 45 · ThinInformational 15Details
Commit message · Renato Britto

units: scrub encoder/decoder layout

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a pure code cleanup in the rust-bitcoin library's 'units' module. It reorders where encoder and decoder definitions appear in six source files so that the Encodable and Decodable trait implementations come before the macro-generated encoder/decoder structs. No behavior, logic, or security properties change; it only makes the layout consistent.

Lower-priorityImprove script test coverageby Jamil Lambert, PhD · ae7b2d5f · Apr 21, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Jamil Lambert, PhD

Improve script test coverage

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only adds new unit tests for existing script types in the rust-bitcoin library. It does not change any production code, fix bugs, or alter behavior. There is no security relevance.

Lower-priorityImprove test of hash_types module borrow implby Jamil Lambert, PhD · 029e2852 · Apr 21, 2026 · 1 fileMessage 55 · ThinInformational 15Details
Commit message · Jamil Lambert, PhD

Improve test of hash_types module borrow impl

Add to the test to improve coverage.

55/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only adds an extra test line to verify that a Bitcoin hash type can be borrowed as a byte slice. It is a routine test-coverage improvement with no functional code changes and no security relevance.

Lower-priorityImprove error test coverageby Jamil Lambert, PhD · 8c3ab476 · Apr 21, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Jamil Lambert, PhD

Improve error test coverage

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only changes test code. It updates two existing tests that check error handling for oversized Bitcoin scripts, making the assertions more robust by verifying the error is non-empty and has no underlying cause. There is no change to production code and no security fix or vulnerability introduced.