Sparrow Wallet

Desktop Bitcoin wallet focused on security, privacy, multisignature, and hardware signers.

BitcoinHardware integrationSoftware walletsNormal

Repository coverage

281 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

50security candidates174second-pass queue43AI analyses

46commits · 30 days

53commits · 60 days

181commits · 180 days

281commits · 365 days

Backfill bands

Aug 5 → Feb 6100 seen9 candidatesComplete

Feb 6 → Jun 6128 seen15 candidatesComplete

Jun 6 → Jul 67 seen1 candidatesComplete

Jul 6 → Aug 546 seen8 candidatesComplete

Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

46/100 average clarity

0Strong · 80–100

20Adequate · 60–79

212Thin · 40–59

49Opaque · 0–39

2security candidates with opaque commit messaging

Read the scoring rubric →

Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.

Craig Raw2684640046

doblon8311048

Michele Balistreri211048

nroktib111050

nzb-tuxxx110060

Liz Lightning200045

craigraw100060

PeterXMR100045

Ian McKenzie100050

ottosch100050

Analysis record

Published AI watches

Last scanned 44 minutes ago

Low 42 AI analysisMessage 50 · Thin

1 day, 9 hours ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

reject extended private keys when creating a terminal watch only wallet, and show import errors

This commit fixes a bug in Sparrow Wallet's terminal (command-line) watch-only wallet creation. Previously, a user could accidentally paste an extended private key (xprv) into a dialog meant only for public keys or output descriptors, and …

Prevents accidental import of extended private keys into watch-only wallet contextSurfaces previously swallowed import errors to the user via error dialogChanges exception handling from ImportException-only to all exceptions

fa0d4841by Craig Raw+19−152 files

No security note in commit

Open full analysis →Source commit ↗

Moderate 61 AI analysisMessage 50 · Thin

1 day, 10 hours ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

always check and restrict existing wallets and backup directories to owner only permissions

This update makes Sparrow Wallet automatically tighten the file permissions on wallet and backup folders so only the computer's owner can read them. Previously, if those folders already existed with looser permissions (for example, created…

Permission hardening for sensitive wallet storage directoriesNew setOwnerOnlyDirectory helper enforcing rwx------ on existing directoriesBackup directory permissions now always restricted on startup

5d387765by Craig Raw+35−01 file

Vendor flagged security relevance

Open full analysis →Source commit ↗

Low 25 AI analysisMessage 45 · Thin

1 day, 10 hours ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

add bitbox02 attestation failed dialog

This commit adds a user-facing warning dialog when a BitBox02 hardware wallet fails an attestation check. Attestation is a process that helps verify the device is genuine and not a counterfeit or tampered unit. Previously, a failed attesta…

Adds explicit user warning for failed hardware wallet attestationPrevents repeated warning dialogs during device enumeration using AtomicBooleanWarns user not to store funds on potentially counterfeit device

1a810c06by Craig Raw+16−12 files

No security note in commit

Open full analysis →Source commit ↗

Moderate 56 AI analysisMessage 50 · Thin

1 day, 12 hours ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

improve validation of payjoin proposals, and accept a substituted payment output where a change output is present

This commit strengthens how Sparrow Wallet checks Payjoin proposals received from a payment receiver. Payjoin lets a receiver add their own inputs to a transaction to improve privacy. The changes add missing checks that could previously le…

Added minimum fee-rate enforcement on Payjoin proposalsAdded Taproot (P2TR) key-path and derived-public-key validation and propagationRestricted payment-output substitution to proposals that retain a change output

32f7e58fby Craig Raw+250−233 files

No security note in commit

Open full analysis →Source commit ↗

Informational 18 AI analysisMessage 65 · Adequate

1 day, 14 hours ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

remove unused signature verification results in satochip and keycard signers, note where signatures are verified

This commit removes leftover code that checked whether signatures from hardware card signers were valid, but then threw away the result. The signatures are still verified later by a different part of the wallet when the signed transaction …

Removal of local signature verification calls in hardware signer code pathsAdded comments documenting that signature verification occurs later via PSBT.verifyCombinedSignatures()Unused boolean results indicate the removed checks were dead code rather than active security controls

866e9893by Craig Raw+5−132 files

No security note in commit

Open full analysis →Source commit ↗

Informational 19 AI analysisMessage 50 · Thin

1 week ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

add option to ignore dust on private key sweep

This commit adds a user-facing checkbox labeled 'Ignore dust' to the private-key sweep feature in Sparrow Wallet. When enabled, very small ('dust') unspent outputs linked to the swept key are excluded from the transaction. This is a usabil…

Adds user-controlled filtering of UTXOs by value thresholdUses existing 'dustAttackThreshold' configuration, implying prior anti-dust handling elsewhereNo input validation, cryptographic, or authorization changes

cf797ea0by nroktib+21−21 file

No security note in commit

Open full analysis →Source commit ↗

Moderate 59 AI analysisMessage 55 · Thin

2 weeks, 2 days ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

update external tor socks proxy control port authentication

This commit hardens how Sparrow Wallet talks to an external Tor proxy's control port. Previously, when asking Tor for a new identity, the app used an older authentication method that could send the contents of a secret cookie file over the…

Switches Tor ControlPort authentication from legacy COOKIE to SAFECOOKIE HMAC challenge-responseAdds loopback-only restriction for external Tor ControlPort connectionsValidates cookie file length and uses constant-time hash comparison

b3d51bceby Craig Raw+83−81 file

Vendor flagged security relevance

Open full analysis →Source commit ↗

Moderate 59 AI analysisMessage 50 · Thin

2 weeks, 6 days ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

check all open tabs when verifying a scanned or loaded transaction matches the originating psbt

This commit tightens how Sparrow Wallet checks that a scanned QR code or loaded file matches the transaction the user is currently working on. Previously, the app only compared the new transaction/PSBT against the single currently open tab…

UI workflow hardening: cross-tab verification prevents acceptance of mismatched transactions/PSBTsPreviously, verification was scoped to a single tab's context PSBT, which could be bypassed by tab confusion or user errorSilent Payments edge case preserved: possibleUnverifiableSilentPaymentsTransaction still triggers a dedicated warning

078af174by Craig Raw+66−234 files

No security note in commit

Open full analysis →Source commit ↗

Moderate 59 AI analysisMessage 60 · Adequate

2 weeks, 6 days ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

verify scanned or loaded transactions match the originating psbt

This commit adds a safety check in the Sparrow Wallet desktop app to make sure a transaction loaded from a file or scanned from a QR code actually matches the PSBT (a partially-signed Bitcoin transaction) that was already open. Before this…

New integrity/matching validation between an originating PSBT and subsequently loaded or scanned transactions/PSBTsUser-facing error dialogs for mismatched transactions and silent-payment transactionsPrevention of displaying a substituted transaction as if it were the intended one

4b8a4594by Craig Raw+64−284 files

No security note in commit

Open full analysis →Source commit ↗

Low 28 AI analysisMessage 62 · Adequate

1 month ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

change bip329 wallet labels export to only assert spendable false for frozen coins and omit otherwise

Incorrect BIP-329 field semantics in wallet label exportPotential for importing wallets to misclassify frozen coins as spendablePrivacy/information disclosure from asserting spendable=true on all unspent UTXOs

37bab9f3by Craig Raw+1−11 file

No security note in commit

Open full analysis →Source commit ↗

Moderate 60 AI analysisMessage 55 · Thin

2 months ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

improve verification of psbt sighash types

New user-facing warning for 'Unsafe PSBT'Adds signature-hash verification on PSBT loadCatches PSBTSignatureException specifically

61ed816cby Craig Raw+11−12 files

Vendor flagged security relevance

Open full analysis →Source commit ↗

Moderate 63 AI analysisMessage 50 · Thin

2 months ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

improve url validation for auth47 and lnurl-auth

Callback URL scheme validation added for authentication protocolsRejection of clearnet HTTP and non-HTTP schemes (file://, ftp://)Bech32 HRP whitelist ('lnurl') added in LnurlAuth

464fade6by Craig Raw+112−105 files

No security note in commit

Open full analysis →Source commit ↗

Informational 15 AI analysisMessage 55 · Thin

2 months, 1 week ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

add custom context menu to signature text area in message sign dialog

This commit adds a standard right-click menu (copy, paste, clear) to the signature text box in Sparrow Wallet's message signing dialog. It is a routine user-interface convenience improvement with no security relevance visible in the code o…

287c943bby Craig Raw+11−01 file

No security note in commit

Open full analysis →Source commit ↗

Low 40 AI analysisMessage 45 · Thin

2 months, 1 week ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

improve loaded psbt verification

Moved silent payment address extraction from controller to wallet-side verification methodRemoved direct trust of PSBT-supplied silent payment address and address-script mappingCommit title explicitly describes the change as improving verification

cb92f765by Craig Raw+3−142 files

No security note in commit

Open full analysis →Source commit ↗

Low 33 AI analysisMessage 50 · Thin

2 months, 2 weeks ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

update bip322 implementation to match completed spec

Added message-mismatch warning before extracting BIP-322 signature from PSBTPrevents silent overwrite of signature field when PSBT message differs from dialog messageNull-check guards added at both PSBT signature extraction call sites

bc7a0be8by Craig Raw+19−52 files

No security note in commit

Open full analysis →Source commit ↗

Informational 19 AI analysisMessage 50 · Thin

2 months, 2 weeks ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

add bip322 message signing for silent payments wallets

This commit adds the ability for Sparrow Wallet users with 'silent payments' wallets to sign messages using the BIP322 standard. It is a feature addition that extends existing message-signing support to a new wallet type. There is no indic…

No security-relevant signals detected in the diffFeature addition: BIP322 message signing for silent payments walletsPrivate key material is cleared from memory after signing (spendPrivKey.clear(), privKey.clear())

a2eb937fby Craig Raw+47−244 files

No security note in commit

Open full analysis →Source commit ↗

Informational 19 AI analysisMessage 62 · Adequate

2 months, 3 weeks ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

default sp wallet birthdate to creation time to avoid full rescans

This commit changes Sparrow Wallet so that newly created or renamed single-signature (SINGLE_SP) wallets get a default 'birth date' set to the current time. The birth date tells the wallet how far back in the blockchain it needs to scan fo…

No security-relevant signals detected in the diff or commit message.Change is framed as a performance/usability improvement to avoid full rescans.No input validation, cryptographic, authorization, or secret-handling changes observed.

a035767eby Craig Raw+17−24 files

No security note in commit

Open full analysis →Source commit ↗

Informational 23 AI analysisMessage 35 · Opaque

3 months ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

implement sp wallet loading

This commit adds support for loading and refreshing 'silent payments' (a newer Bitcoin privacy feature) wallets in Sparrow. It introduces server subscription management, scan caching, and UI wiring. There is no direct evidence in the commi…

New network subscription lifecycle for silent payments with refcounting and concurrent accessPrivate scan key is serialized to hex and sent to Electrum server via subscribeSilentPaymentsConcurrency primitives (ReentrantLock, Condition) used for scan cache state

e64069f0by Craig Raw+814−13222 files

No security note in commit

Open full analysis →Source commit ↗

Informational 19 AI analysisMessage 50 · Thin

3 months, 1 week ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

support sp wallet import via all keystore importers

This commit adds the ability to import a new kind of Bitcoin wallet—called a 'silent payment' (SP) singlesig wallet—through the same screens and file formats that already supported ordinary HD singlesig wallets. It updates dropdown menus, …

New import surface for silent-payment descriptors (sp(...) and tspscan keys) added to multiple parsersSome importers now reject SINGLE_SP explicitly, which is a defensive boundaryNo input validation, memory handling, or cryptographic changes are visible beyond policy/script-type routing

723b004eby Craig Raw+204−11713 files

No security note in commit

Open full analysis →Source commit ↗

Low 33 AI analysisMessage 50 · Thin

3 months, 1 week ago

SW SparrowSparrow Wallet BitcoinHardware integrationSoftware wallets

add policy type to all keystore import interfaces and factory methods for explicit keystore xpub or spscan field population

This commit is a broad code change that threads a new 'policy type' value through many wallet import paths. The main practical effect visible in the diff is adding support for importing a new kind of Bitcoin wallet called 'silent payments'…

Adds silent payments (BIP352) scan key import path for Coldcard singlesigRemoves hard-coded WalletModel assignments in several importer subclasses, relying on getWalletModel()Changes SettingsController script-type selection behavior to always pick the default for the selected policy type

0459f4caby Craig Raw+200−10857 files

No security note in commit

Open full analysis →Source commit ↗

Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

AI review queuedfix regression from jdk25 update causing silent skips when importing jsonl wallet label linesby Craig Raw · f697aa61 · Jul 3, 2026 · 1 fileMessage 60 · AdequateTriage 12Details

Commit message · Craig Raw

fix regression from jdk25 update causing silent skips when importing jsonl wallet label lines

60/100 · AdequateMessage clarity

✓ Specific, descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: security-sensitive path

Security candidatechange bip329 wallet labels export to only assert spendable false for frozen coins and omit otherwiseby Craig Raw · 37bab9f3 · Jul 2, 2026 · 1 fileMessage 62 · AdequateLow 28Details

Commit message · Craig Raw

change bip329 wallet labels export to only assert spendable false for frozen coins and omit otherwise

62/100 · AdequateMessage clarity

✓ Specific, descriptive subject✓ Names a concrete action or component✓ Explains rationale or failure mode! No meaningful explanatory body

Why it was queued

secret or key materialsigning or wallet path

AI analysis · Low 28/100

This commit fixes how Sparrow Wallet exports coin labels in the BIP-329 format. Previously, the export incorrectly marked every unspent coin as 'spendable=true' in the exported file, even though the BIP-329 specification says the 'spendable' field should only be used to mark coins as frozen (not spendable). Other wallets importing this file could have treated frozen coins as spendable, or made incorrect assumptions about the user's coins. The fix now only writes 'spendable=false' for frozen coins and leaves the field out otherwise.

Lower-priorityupgrade lanterna to v3.1.5by Craig Raw · 3dc50682 · Jun 23, 2026 · 1 fileMessage 45 · ThinTriage 0Details

Commit message · Craig Raw

upgrade lanterna to v3.1.5

45/100 · ThinMessage clarity

✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

AI review queuedbump to v2.5.3by Craig Raw · d5b119e3 · May 31, 2026 · 4 filesMessage 38 · OpaqueTriage 12Details

Commit message · Craig Raw

bump to v2.5.3

38/100 · OpaqueMessage clarity

✓ Subject identifies a change✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path

AI review queuedrevise wording for non-default sighash warningsby Craig Raw · b457caa5 · May 31, 2026 · 2 filesMessage 45 · ThinTriage 12Details

Commit message · Craig Raw

revise wording for non-default sighash warnings

45/100 · ThinMessage clarity

✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: security-sensitive path

Security candidateimprove verification of psbt sighash typesby Craig Raw · 61ed816c · May 31, 2026 · 2 filesMessage 55 · ThinModerate 60Details

Commit message · Craig Raw

improve verification of psbt sighash types

55/100 · ThinMessage clarity

✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body

Why it was queued

signing boundarydefensive validationsigning or wallet path

AI analysis · Moderate 60/100

This commit adds a safety check in Sparrow Wallet when opening a PSBT (a file format used to pass partially-signed Bitcoin transactions between wallets). Before this change, the wallet did not verify the signature-hash types declared inside the PSBT. A malicious or malformed PSBT could ask the wallet to sign in a way that unexpectedly alters what the signature covers, potentially leading to loss of funds. After the change, Sparrow warns the user and asks whether to continue.

AI review queuedmake date axis formatter tests locale-stableby Craig Raw · 9a603d75 · May 30, 2026 · 1 fileMessage 55 · ThinTriage 12Details

Commit message · Craig Raw

make date axis formatter tests locale-stable

55/100 · ThinMessage clarity

✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: security-sensitive path

AI review queuedshow full year on balance chart x-axisby PeterXMR · ac666545 · May 30, 2026 · 2 filesMessage 45 · ThinTriage 12Details

Commit message · PeterXMR

show full year on balance chart x-axis

45/100 · ThinMessage clarity

✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: security-sensitive path

AI review queueduse configured unit format in send to many dialog instead of jvm defaultby Craig Raw · c4c77d84 · May 30, 2026 · 2 filesMessage 50 · ThinTriage 12Details

Commit message · Craig Raw

use configured unit format in send to many dialog instead of jvm default

50/100 · ThinMessage clarity

✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: security-sensitive path

AI review queuedfix potential off by 1 sat rounding error on imported send to many dialog amountsby Craig Raw · 8d126869 · May 30, 2026 · 1 fileMessage 50 · ThinTriage 12Details

Commit message · Craig Raw

fix potential off by 1 sat rounding error on imported send to many dialog amounts

50/100 · ThinMessage clarity

✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: security-sensitive path

Security candidateimprove url validation for auth47 and lnurl-authby Craig Raw · 464fade6 · May 30, 2026 · 5 filesMessage 50 · ThinModerate 63Details

Commit message · Craig Raw

improve url validation for auth47 and lnurl-auth

50/100 · ThinMessage clarity

✓ Descriptive subject✓ Names a concrete action or component✓ Names security-relevant behavior explicitly! No meaningful explanatory body

Why it was queued

signing or wallet pathauthentication path

AI analysis · Moderate 63/100

This commit tightens the checks on web addresses used during two login-style features, Auth47 and LNURL-auth. Previously, a malicious or malformed callback address could use insecure schemes such as plain HTTP on the regular internet or non-web schemes like file:// or ftp://. The patch now requires callbacks to be HTTPS, a special 'srbn' scheme, or a Tor .onion address over HTTP, and adds tests to confirm the new behavior. This reduces the risk that an attacker could trick the wallet into sending authentication data to an unintended destination.

AI review queuedfix potential npes resulting from get transactionsby Craig Raw · 79517da1 · May 28, 2026 · 1 fileMessage 50 · ThinTriage 12Details

Commit message · Craig Raw

fix potential npes resulting from get transactions

50/100 · ThinMessage clarity

✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: security-sensitive path

AI review queuedfollowup for precomputed sp outputsby Craig Raw · 08629743 · May 26, 2026 · 1 fileMessage 45 · ThinTriage 12Details

Commit message · Craig Raw

followup for precomputed sp outputs

45/100 · ThinMessage clarity

✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: security-sensitive path

AI review queuedwarn on loading transactions with non-zero outputs of unknown script typeby Craig Raw · d69e274b · May 26, 2026 · 1 fileMessage 50 · ThinTriage 12Details

Commit message · Craig Raw

warn on loading transactions with non-zero outputs of unknown script type

50/100 · ThinMessage clarity

✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: security-sensitive path

AI review queuedupdate lark for hid4javaby Craig Raw · d1e67ad4 · May 24, 2026 · 1 fileMessage 28 · OpaqueTriage 0Details

Commit message · Craig Raw

update lark for hid4java

28/100 · OpaqueMessage clarity

✓ Subject identifies a change! No meaningful explanatory body

Why it was queued

second-pass: opaque commit message

AI review queuedimplement dust detection for sp wallets on received utxos at a higher default limitby Craig Raw · 37ca98c2 · May 24, 2026 · 3 filesMessage 50 · ThinTriage 12Details

Commit message · Craig Raw

implement dust detection for sp wallets on received utxos at a higher default limit

50/100 · ThinMessage clarity

✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: security-sensitive path

Security candidateadd custom context menu to signature text area in message sign dialogby Craig Raw · 287c943b · May 23, 2026 · 1 fileMessage 55 · ThinInformational 15Details

Commit message · Craig Raw

add custom context menu to signature text area in message sign dialog

55/100 · ThinMessage clarity

✓ Specific, descriptive subject✓ Names a concrete action or component✓ Names security-relevant behavior explicitly! No meaningful explanatory body

Why it was queued

signing boundarysigning or wallet path

AI analysis · Informational 15/100

Security candidateimprove loaded psbt verificationby Craig Raw · cb92f765 · May 23, 2026 · 2 filesMessage 45 · ThinLow 40Details

Commit message · Craig Raw

improve loaded psbt verification

45/100 · ThinMessage clarity

✓ Descriptive subject✓ Mentions testing or verification! No meaningful explanatory body

Why it was queued

signing boundarydefensive validationsigning or wallet path

AI analysis · Low 40/100

This commit changes how Sparrow Wallet checks the silent payment addresses inside a loaded PSBT (a partially signed Bitcoin transaction). Previously, the wallet extracted and trusted the silent payment addresses directly from the PSBT file itself. Now it passes the PSBT to a wallet method that performs verification before returning the addresses. The change suggests the previous code may have accepted unverified or spoofed silent payment addresses from an external PSBT, which could lead to sending funds to an attacker's address, but the diff alone does not show what the new verification actually does or whether any bug was exploitable in practice.

AI review queuedbump to v2.5.2by Craig Raw · 24e9c39c · May 22, 2026 · 4 filesMessage 38 · OpaqueTriage 12Details

Commit message · Craig Raw

bump to v2.5.2

38/100 · OpaqueMessage clarity

✓ Subject identifies a change✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path

AI review queuedfix incorrect script type selected in settings on p2tr wallet loadby Craig Raw · 754ebf7b · May 22, 2026 · 1 fileMessage 50 · ThinTriage 12Details

Commit message · Craig Raw

fix incorrect script type selected in settings on p2tr wallet load

50/100 · ThinMessage clarity

✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: security-sensitive path

Security candidateupdate bip322 implementation to match completed specby Craig Raw · bc7a0be8 · May 22, 2026 · 2 filesMessage 50 · ThinLow 33Details

Commit message · Craig Raw

update bip322 implementation to match completed spec

50/100 · ThinMessage clarity

✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

secret or key materialsigning or wallet path

AI analysis · Low 33/100

This commit adds a safety check when extracting a BIP-322 signature from a signed PSBT file. Before, Sparrow would blindly copy the signature into the dialog even if the message inside the PSBT did not match the message the user originally asked to sign. Now it warns the user and asks whether to continue, and if the user declines (or the extraction returns null), it no longer overwrites the signature field. This reduces the risk of a malicious or mismatched PSBT tricking a user into accepting a signature for a different message than intended.

AI review queuedfix potential npe on transaction entry tooltipby Craig Raw · 87af1ed9 · May 22, 2026 · 1 fileMessage 45 · ThinTriage 12Details

Commit message · Craig Raw

fix potential npe on transaction entry tooltip

45/100 · ThinMessage clarity

✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: security-sensitive path

AI review queuedbump to v2.5.1by Craig Raw · da476c9d · May 21, 2026 · 4 filesMessage 38 · OpaqueTriage 12Details

Commit message · Craig Raw

bump to v2.5.1

38/100 · OpaqueMessage clarity

✓ Subject identifies a change✓ Names a concrete action or component! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path

AI review queuedminor ui tweaks followupby Craig Raw · d8e4582b · May 21, 2026 · 1 fileMessage 28 · OpaqueTriage 12Details

Commit message · Craig Raw

minor ui tweaks followup

28/100 · OpaqueMessage clarity

✓ Subject identifies a change! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path

AI review queuedminor ui tweaksby Craig Raw · ad5c6959 · May 21, 2026 · 2 filesMessage 28 · OpaqueTriage 12Details

Commit message · Craig Raw

minor ui tweaks

28/100 · OpaqueMessage clarity

✓ Subject identifies a change! No meaningful explanatory body

Why it was queued

signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path