SW
← All projectsStack Wallet

Stack Wallet

Actively maintained multi-coin self-custody wallet with Monero support and on-device keys.

MoneroPrivacy protocolsSoftware walletsNormal
Repository coverage

1053 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

338security candidates411second-pass queue749AI analyses
77commits · 30 days
175commits · 60 days
600commits · 180 days
1003commits · 365 days
Backfill bands
Sep 27 → Mar 31404 seen73 candidatesComplete
Mar 31 → Jul 29463 seen238 candidatesComplete
Jul 29 → Aug 2887 seen8 candidatesComplete
Aug 28 → Sep 2753 seen6 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

51/100 average clarity
33Strong · 80–100
316Adequate · 60–79
513Thin · 40–59
191Opaque · 0–39
33security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Navid Rahimi1017154
sneurlax339158241062
julian347112269044
Julian19741144043
Dan Miller831525053
Reuben Yap20318052
Cyrix12615211049
julian-CStack222049
levoncrypto24121043
Tritonn204412052
cassandras-lies413048
NyanCatTW1111045
Analysis record

Published AI watches

Last scanned 51 minutes ago

Informational 24 AI analysisMessage 73 · Adequate
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge pull request #1469 from Cyrix126/building_dialog_cancel

This commit fixes a mobile UI bug where pressing Cancel on a 'building transaction' dialog accidentally closed one too many screens. The fix moves the responsibility for closing the dialog into each screen's cancel handler, and prevents er…

No security-relevant signals in the diffUI-only navigation and error-dialog suppression changesNo cryptographic, authentication, authorization, or data-handling changes
94e6da66by Julian+68−8412 files
No security note in commit
Informational 20 AI analysisMessage 50 · Thin
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge branch 'staging' into building_dialog_cancel

This commit is a routine merge from the project's staging branch into a feature branch. The visible code changes fix small UI/UX bugs in Stack Wallet's send screens: clearing an internal address-validation cache when the form is reset, mak…

Clearing stale address-provider state on form reset reduces the risk of stale validation data influencing a subsequent transactionFee-form caching prevents repeated network calls and accidental fee UI flicker/state races on rebuildQR scan buttons are UX additions with no visible parser/validation logic changes
0485b166by Julian+194−56 files
No security note in commit
Informational 17 AI analysisMessage 58 · Thin
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge pull request #1468 from Cyrix126/desktop_fee_form_refetch

This commit fixes a desktop wallet bug where the send-fee form would repeatedly re-fetch fee estimates on every screen rebuild, wasting resources and possibly flickering. It now caches the fee estimate and only retries if the previous fetc…

No security-relevant signals present in diff or commit metadataChange is a UI/UX performance and reliability improvement
62432946by Julian+176−52 files
No security note in commit
Informational 17 AI analysisMessage 50 · Thin
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge branch 'staging' into desktop_fee_form_refetch

This commit merges a feature branch into another work-in-progress branch. It adds QR-code scanning buttons to two desktop token send screens and resets an internal address-validation state variable when the send form is cleared. There is n…

State reset added to clearForm() to avoid stale validation dataNew QR scan entry points in token send flows (UI feature, not a vulnerability signal)
8a72c82fby Julian+18−04 files
No security note in commit
Low 32 AI analysisMessage 73 · Adequate
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge pull request #1467 from Cyrix126/clear_send_form_validity

This change fixes a UI state bug in the cryptocurrency wallet's send form. When a user clears the send form, the app now also resets whether the entered address is considered valid. Without this fix, the form could incorrectly keep showing…

UI state desynchronization between form field and validity indicatorPotential user confusion from stale valid-address stateNo input validation, cryptographic, or network-layer changes
d3383b4eby Julian+2−02 files
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge branch 'staging' into clear_send_form_validity

This commit adds a QR code scanner button to two desktop cryptocurrency send forms. It is a straightforward user-interface feature addition with no apparent security relevance.

22560a59by Julian+16−02 files
No security note in commit
Informational 20 AI analysisMessage 73 · Adequate
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge pull request #1466 from Cyrix126/desktop_token_qr_button

This commit adds a missing QR code scan button to two desktop token send screens in the Stack Wallet app. It is a straightforward user-interface fix that restores a feature already present on mobile and other send views; there is no indica…

47f6d369by Julian+16−02 files
No security note in commit
Informational 15 AI analysisMessage 18 · Opaque
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

style: format

This commit is purely a code-formatting cleanup. It changes line breaks and indentation in four user-interface files so the code is easier to read, but it does not change what the app actually does. There is no security relevance.

ae45aba8by Cyrix126+47−524 files
No security note in commit
Informational 23 AI analysisMessage 62 · Adequate
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

fix: stop estimating the desktop fee for a zero amount

This commit fixes a UI bug in the desktop version of Stack Wallet where the send amount could be lost while the app was trying to estimate transaction fees. The fix keeps the amount 'alive' in memory so fee estimation does not accidentally…

State lifecycle issue in UI provider could lead to loss of user inputFix prevents fee estimation from silently resetting send amount to zeroNo cryptographic, authentication, or network security changes present
90c91bdeby Cyrix126+22−02 files
No security note in commit
Low 32 AI analysisMessage 45 · Thin
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

show split tx warning on confirm screen

This commit updates the Stack Wallet app so that when a single payment is broken into multiple cryptocurrency transactions, the user sees a clear warning on the confirmation screen. It also changes the app's internal record-keeping to hand…

UI now warns users when a payment will be split into multiple on-chain transactionsInternal transaction model changed from single txid to list of txidsMultiple confirmation flows updated to iterate over all txids for notes and trade lookups
80343a5aby Julian+376−23916 files
No security note in commit
Informational 18 AI analysisMessage 62 · Adequate
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

fix: stop refetching the desktop fee rates on every rebuild

This commit fixes a performance bug in the desktop version of Stack Wallet where the app repeatedly re-fetched Bitcoin-style fee rates every time the on-screen fee form rebuilt. The change caches the fee result and only fetches again if th…

Unnecessary repeated network requests reducedFuture result cached to avoid re-execution on widget rebuildError path clears cache to allow retry
a1ca9292by Cyrix126+154−52 files
No security note in commit
Low 34 AI analysisMessage 62 · Adequate
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

fix: reset the address validity when clearing the send form

This commit fixes a UI state bug in Stack Wallet's send form. When a user clears the send form, the wallet now also resets whether the entered address is considered valid. Without this fix, the form could incorrectly keep showing an old ad…

Stale UI state after form resetAddress validity not synchronized with address field resetPotential UI confusion leading to incorrect send confirmation
43dd0477by Cyrix126+2−02 files
No security note in commit
Low 35 AI analysisMessage 73 · Adequate
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge pull request #1450 from Ez3kiel-dev/fix/xelis-integration

This is a large feature/fix merge that restores and rewrites the Xelis (XEL) cryptocurrency integration in Stack Wallet. It swaps the old hand-rolled Xelis code for a new generated native interface (XWF), adds wallet restore/backup support…

Send-flow lifecycle hardening: prepared Xelis transactions are now discarded via cancelSend when the user cancels or the widget is disposedSession-generation checks prevent stale wallet handles from being used after close/reopenMutex serialization added around send preparation, balance, history, and rescan operations
ad945d43by Julian+4298−162634 files
No security note in commit
Low 32 AI analysisMessage 45 · Thin
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge branch 'staging' into fix/xelis-integration

This commit is a large merge that mainly adds integration tests for a desktop 'forgot password' reset feature and makes supporting code changes to safely shut down background database workers during that reset. It also removes a large set …

New integration tests exercise a destructive 'forgot password' data-wipe featureTests assert that password store and wallet key store are deleted on successful resetTests assert that wallet files are deleted while backup and tor state are preserved
b0e5d35aby Julian+2678−330378 files
No security note in commit
Informational 19 AI analysisMessage 73 · Adequate
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge pull request #1361 from cypherstack/fix/305-multiline-transaction-notes

This commit lets users type multi-line notes when editing transaction and trade notes, and fixes the desktop layout so long notes scroll instead of breaking the screen. It also swaps the old `mounted` check for the newer `context.mounted` …

5172e63eby Julian+402−1113 files
No security note in commit
Low 32 AI analysisMessage 50 · Thin
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge branch 'staging' into fix/305-multiline-transaction-notes

This commit is a large merge that mainly removes old integration tests and adds new desktop 'forgot password' reset tests. It also adds a safe-shutdown path for background Firo cache workers and databases. The changes look like defensive h…

Added safe shutdown of Firo cache isolates/SQLite databases before reset exitNew integration tests verify desktop forgot-password reset deletes secrets and preserves backupsTest harness intercepts exit() and IOOverrides to observe reset side effects
21491edbby Julian+2352−319075 files
No security note in commit
Moderate 57 AI analysisMessage 73 · Adequate
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge pull request #1455 from cypherstack/fix/desktop-pw-reset

This commit fixes the desktop "forgot password" reset flow in Stack Wallet. It adds integration tests that verify the app can securely wipe its own data when a user forgets the desktop password, and it updates the Firo cache worker to clos…

Desktop password reset now closes Firo cache workers and SQLite databases before deleting app data, reducing the risk of data leakage or corruption during wipeNew integration tests assert that a successful reset removes password store (hive/desktopdata.hive), wallet key store (isar/desktopStore.isar), and wallet files while preserving backups and tor stateFailed reset scenario leaves a .reset-pending marker and removes password/key stores first, preventing the reset from being undone after partial deletion
055e6c6bby Julian+1077−297154 files
No security note in commit
Low 37 AI analysisMessage 45 · Thin
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge branch 'staging' into fix/desktop-pw-reset

This commit is a large merge that mainly adds a new 'prove you own a Spark address' feature to the Stack Wallet app, plus some related fixes. It also updates a dependency that handles SOCKS5 proxy connections and changes how the app decide…

New cryptographic signing path added: SparkInterface.signMessage now delegates to Spark ownership proof creation using the wallet's private key and spark derivation path.Ownership proof code rejects view-only wallets and blank messages, and searches a 100-address lookahead for the requested address before signing.Dependency upgrade: socks5_proxy 1.0.3+dev.3 -> 2.1.1, which may change SOCKS5/Tor proxy behavior; a new test verifies hostname/onion routing through a fake SOCKS server.
d9b5cc02by Julian+1275−21923 files
No security note in commit
Low 34 AI analysisMessage 83 · Strong
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge pull request #1439 from navidR/dev/navidr/spark-name-verification

This commit adds a new feature to Stack Wallet that lets users prove they own a Spark (privacy) address by generating a cryptographic ownership proof. It also improves the sign/verify screens so view-only wallets can still verify proofs, a…

New cryptographic proof generation using private key material (privateKeyHex, spendKeyIndex, diversifier) inside an isolateView-only wallet guard added for proof creation (throws if isViewOnly)Message whitespace now preserved for pasted/typed challenge messages, preventing proof/verification mismatches caused by silent trimming
a5411a50by Julian+1097−16616 files
No security note in commit
Low 39 AI analysisMessage 60 · Adequate
SW Stack WalletStack Wallet MoneroPrivacy protocolsSoftware wallets

Merge branch 'staging' into dev/navidr/spark-name-verification

This commit merges several changes into a development branch. The most notable security-relevant change is a fix for how the Trocador exchange service routes traffic: it now automatically uses Tor (an anonymity network) when the user has T…

Trocador exchange API previously forced clearnet (`isOnion: false`) at every call site, bypassing Tor even when enabledNew `_useTor` getter centralizes Tor routing decision based on app feature flag and user preferenceOnion service address rotated to a new v3 .onion hostname
92955848by Julian+122−507 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

AI review queuedsol transaction parsing and gui updatesby julian · 71d4348d · Jan 20, 2026 · 7 filesMessage 45 · ThinInformational 24Details
Commit message · julian

sol transaction parsing and gui updates

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 24/100

This commit updates how Stack Wallet parses and displays Solana (SOL) and Solana token (SPL) transactions. It changes the code that reads transaction data from the Solana blockchain so it looks at the actual 'transfer' instructions inside each transaction rather than guessing sender/receiver from account key order. It also adds Solana-specific support to several user-interface screens that previously only handled Ethereum tokens. There is no clear security fix or vulnerability being patched; it reads as a feature/bug-fix update for Solana transaction handling.

AI review queuedfix linux app idby julian · 0b2b797e · Jan 20, 2026 · 1 fileMessage 28 · OpaqueInformational 15Details
Commit message · julian

fix linux app id

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This is a one-line build script fix that ensures the Linux app identifier is correctly substituted during packaging. It is not a security fix and does not change any runtime code that handles money, passwords, or network traffic.

AI review queuedfix sol token sends with ATAby julian · e112cdf0 · Jan 20, 2026 · 5 filesMessage 45 · ThinLow 42Details
Commit message · julian

fix sol token sends with ATA

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Low 42/100

This commit fixes how Stack Wallet sends Solana tokens. Previously, the app required the recipient to already have a token account (ATA) set up, and it could fail or send funds incorrectly if that account didn't exist. The update makes the wallet automatically create the recipient's token account during the transaction if needed, and it cleans up how token details are passed around. There is no clear security bug being patched, but the change touches code that handles real money transfers, so mistakes here could cause lost funds or failed transactions.

AI review queuedWIP fix sol token sendsby julian · e1a3c799 · Jan 19, 2026 · 1 fileMessage 18 · OpaqueLow 32Details
Commit message · julian

WIP fix sol token sends

18/100 · OpaqueMessage clarity
✓ Subject identifies a change✓ Names a concrete action or component! No meaningful explanatory body! Contains work-in-progress language
Why it was queued
signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path
AI analysis · Low 32/100

This commit fixes how Stack Wallet builds Solana token transfer addresses. It corrects two mistakes: a truncated Solana program ID string, and a change from encoding address seeds as plain text to encoding them properly as base58-decoded bytes. The old code likely produced wrong associated-token-account addresses, which could cause token sends to fail or, in the worst case, send funds to an address the user did not intend.

AI review queuedvarious sol clean up and fixesby julian · c28ddb8d · Jan 19, 2026 · 5 filesMessage 45 · ThinInformational 23Details
Commit message · julian

various sol clean up and fixes

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 23/100

This commit cleans up Solana wallet handling in Stack Wallet. It removes a duplicate desktop Solana card widget, makes Solana token wallets delegate more operations to the parent Solana wallet (such as address filters and node updates), and fixes balance display formatting so Solana token balances use the correct token contract details. There is no clear security vulnerability in the diff, but the changes correct consistency issues that could have led to stale or incorrect wallet state.

AI review queuedfix missing sol transactions list on desktopby julian · 94b07c34 · Jan 19, 2026 · 1 fileMessage 45 · ThinInformational 19Details
Commit message · julian

fix missing sol transactions list on desktop

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 19/100

This commit fixes a user-interface bug on the desktop version of Stack Wallet where the 'Transactions' tab was missing for Solana (SOL) wallets. The change simply adds Solana alongside Ethereum so that the transactions list is shown. There is no indication this is a security issue; it is a UI/UX fix.

AI review queuedfix sol token wallet navigation bugby julian · 321d666f · Jan 19, 2026 · 3 filesMessage 45 · ThinInformational 15Details
Commit message · julian

fix sol token wallet navigation bug

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit fixes a navigation bug when users open a Solana token wallet. Previously, the app created a Solana token wallet object directly in two places, which could leave important wallet services (preferences, node connection, secure storage, and database) uninitialized. The fix adds a single factory helper that copies those services from the main Solana wallet into the token wallet before use. There is no direct evidence this is a security vulnerability, but missing service wiring in a wallet app can lead to crashes, incorrect state, or unexpected behavior.

AI review queuedmake it possible to leave token details on desktop and various other small sol ui changes to bring it more in line with eth tokensby julian · 4697f7ee · Jan 19, 2026 · 6 filesMessage 50 · ThinInformational 12Details
Commit message · julian

make it possible to leave token details on desktop and various other small sol ui changes to bring it more in line with eth tokens

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 12/100

This commit is a routine user-interface refactor for the Stack Wallet app. It changes how Solana token details are shown on desktop so users can view them in a popup dialog instead of navigating to a separate page, and it makes Solana token pages behave more like existing Ethereum token pages. There is no indication this fixes a security vulnerability.

AI review queuedUNTESTED: sol send memo fieldby julian · b45c9f73 · Jan 19, 2026 · 7 filesMessage 45 · ThinInformational 18Details
Commit message · julian

UNTESTED: sol send memo field

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 18/100

This commit adds an optional memo field to Solana (SOL) and Solana token sends in the Stack Wallet app, similar to the existing memo field for Stellar. It updates the user interface and the wallet code that builds Solana transactions so that any memo entered by the user is included in the transaction. The commit title says 'UNTESTED', meaning the author flagged it as not yet verified. There is no direct evidence in the diff of a security vulnerability, but adding a new untested code path for transaction construction creates a small chance of bugs such as incorrect fees, failed transactions, or unexpected memo handling.

AI review queuedfix: PNGs are not SVGs (and fallback on network image load failure)by julian · bc3be3e5 · Jan 19, 2026 · 1 fileMessage 62 · AdequateInformational 19Details
Commit message · julian

fix: PNGs are not SVGs (and fallback on network image load failure)

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 19/100

This commit fixes a UI bug where token icons that are PNG images were incorrectly loaded as SVG images, which could fail to display. It also adds a fallback to a local icon file if a network image fails to load. The change is a defensive UI improvement rather than a fix for a known security vulnerability.

AI review queuedfix: firo related addressbook bugby julian · 2847b7a0 · Jan 16, 2026 · 2 filesMessage 57 · ThinLow 29Details
Commit message · julian

fix: firo related addressbook bug

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Low 29/100

This commit fixes a bug in Stack Wallet's address book related to Firo's Spark privacy addresses. Previously, the code could try to use or generate Spark addresses for certain view-only wallets that don't actually support Spark, and it could also crash or behave incorrectly when no current Spark address existed yet. The patch adds a guard to skip non-Spark view-only wallets and makes the internal current-address field optional so the wallet can recover gracefully when it isn't initialized.

AI review queuedfix non firo view only new wallet creation bugby julian · 0920b726 · Jan 15, 2026 · 1 fileMessage 45 · ThinInformational 23Details
Commit message · julian

fix non firo view only new wallet creation bug

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 23/100

This commit fixes a bug in the Stack Wallet app where creating a new non-Firo wallet with the 'view only' option could incorrectly trigger Firo-specific Spark view-only conversion logic. The fix adds a check that the selected coin is actually Firo before enabling the Spark view-only path. It appears to be a functional bug fix rather than a security vulnerability, but the incorrect flag could lead to unexpected wallet behavior or creation failure.

AI review queuedfix restore height display bugby julian · 8b2e6ad5 · Jan 15, 2026 · 1 fileMessage 45 · ThinInformational 19Details
Commit message · julian

fix restore height display bug

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 19/100

This commit fixes a display bug in the wallet settings screen where the 'restore height' value could fail to appear for certain cryptocurrency wallets. The old code tried to read the height directly, but the new code waits for an asynchronous lookup and updates the text field after the UI frame is ready. There is no indication this is a security issue.

Security candidateupdate epic libby Julian · 588fc1e2 · Jan 15, 2026 · 1 fileMessage 28 · OpaqueInformational 0Details
Commit message · Julian

update epic lib

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body! Opaque security-relevant change
Why it was queued
cryptography-sensitive path
AI analysis · Informational 0/100

The commit message says 'update epic lib' and changes one file in a crypto plugin submodule, but the actual code diff is unavailable. There is no visible information about what was changed, why it was changed, or whether it fixes a security issue.

AI review queuedtemporarily hide firo masternode gui optionsby julian · 17315f10 · Jan 14, 2026 · 2 filesMessage 45 · ThinInformational 19Details
Commit message · julian

temporarily hide firo masternode gui options

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 19/100

This commit simply hides the on-screen buttons that let Firo wallet users open the masternode (staking) screens in Stack Wallet. The underlying masternode code is still present in the app; users just cannot reach it through the normal user interface for now. There is no direct evidence in the commit that this fixes a security vulnerability.

AI review queuedvarious masternode related fixes and improvementsby julian · a088e2c0 · Jan 13, 2026 · 4 filesMessage 45 · ThinLow 31Details
Commit message · julian

various masternode related fixes and improvements

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Low 31/100

This commit fixes several bugs in the masternode registration flow of a cryptocurrency wallet app. It improves input validation (requiring a properly formatted IP:port, and an operator reward between 0% and 100%), fixes a unit-conversion bug when calculating the operator reward, and improves UI feedback after registration. There is no clear evidence of a security vulnerability being patched, but the changes reduce the chance of user mistakes and malformed transactions.

AI review queuedfix message bug I introduced earlierby julian · c52cdfbd · Jan 13, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · julian

fix message bug I introduced earlier

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit fixes a typo in an error message. The word 'master' was accidentally written as 'masternode' was split into 'master You must have...' due to a missing period and space. The change only corrects the text shown to users and does not alter any wallet logic, calculations, or security behavior.

AI review queuedWIP mobile masternodes listby julian · 16ea6f7e · Jan 13, 2026 · 4 filesMessage 15 · OpaqueInformational 15Details
Commit message · julian

WIP mobile masternodes list

15/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body! Contains work-in-progress language
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit is a routine user-interface update for the mobile masternode list in Stack Wallet. It adds a new details screen, replaces an inline list with a reusable card widget, swaps a generic loading spinner for the app's own loading indicator, and registers the new screen in the navigation router. There is no indication of any security fix or vulnerability being addressed.

AI review queuedextract master node info into separate widgets and improve look and feelby julian · 73b5a89f · Jan 13, 2026 · 3 filesMessage 50 · ThinInformational 15Details
Commit message · julian

extract master node info into separate widgets and improve look and feel

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a routine user-interface refactor. It moves the masternode details display into a new reusable widget and updates the visual styling. There is no security-relevant change.

AI review queuedrefactor create masternode dialog to match app wide look and feel and WIP general masternodes UX upgradesby julian · a738c224 · Jan 13, 2026 · 5 filesMessage 30 · OpaqueInformational 12Details
Commit message · julian

refactor create masternode dialog to match app wide look and feel and WIP general masternodes UX upgrades

30/100 · OpaqueMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body! Contains work-in-progress language
Why it was queued
signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path
AI analysis · Informational 12/100

This commit is a user-interface refactor for the masternode creation screen in Stack Wallet. It moves the masternode registration form into a reusable widget, updates styling to match the rest of the app, and renames an internal constant. There is no indication of a security fix or vulnerability being addressed.

Security candidatefix: fix randomx-rust for androidby sneurlax · e81816ee · Jan 12, 2026 · 1 fileMessage 57 · ThinInformational 2Details
Commit message · sneurlax

fix: fix randomx-rust for android

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
proof-of-work or emission validationcryptography-sensitive path
AI analysis · Informational 2/100

This commit claims to fix a RandomX Rust integration issue specifically for Android in a crypto plugin. However, the actual code diff is unavailable, so no direct evidence can be reviewed. Based only on the title and message, it appears to be a platform-specific build or compatibility fix rather than a security vulnerability.

Security candidatefeat: Epic slatepacks and uiby sneurlax · f30030a8 · Jan 12, 2026 · 20 filesMessage 57 · ThinInformational 15Details
Commit message · sneurlax

feat: Epic slatepacks and ui

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
cryptography-sensitive pathsigning or wallet path
AI analysis · Informational 15/100

This commit adds a new user-facing feature to Stack Wallet: support for Epic Cash 'slatepack' transactions. Slatepacks are a manual, offline-friendly way to exchange transaction data (via QR codes, text, or files) as an alternative to the automatic 'Epicbox' method. The change introduces new UI screens, models, and wallet methods to create, receive, decode, and finalize slatepacks. There is no indication in the commit that this is a security fix or vulnerability patch.

AI review queuedsatisfy linter and some clean upby julian · 9f92bcbe · Jan 12, 2026 · 3 filesMessage 45 · ThinInformational 12Details
Commit message · julian

satisfy linter and some clean up

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 12/100

This commit is a routine code cleanup and linter-compliance patch for the Stack Wallet Firo/Spark wallet code. It removes unused imports, renames a variable for clarity, refactors a small helper function, updates comments, and bumps a dependency (coinlib) to a newer commit. There is no direct evidence in the diff of a security vulnerability being fixed or introduced.

AI review queuedAdd support for creating Firo masternodes.by cassandras-lies · 65a8596a · Jan 12, 2026 · 11 filesMessage 45 · ThinLow 34Details
Commit message · cassandras-lies

Add support for creating Firo masternodes.

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Low 34/100

This commit adds a new feature to Stack Wallet that lets Firo cryptocurrency users create and manage masternodes directly from the app. A masternode is a special server that helps run the Firo network and requires locking up 1,000 FIRO as collateral. The change adds new screens, wallet logic, and transaction-building code to support this. It is a feature-add commit, not a stated security fix, but it touches sensitive areas like transaction construction, address validation, and balance checks.

AI review queuedpaginate desktop recent activity transactionsby julian · fd0ea218 · Jan 12, 2026 · 3 filesMessage 45 · ThinInformational 15Details
Commit message · julian

paginate desktop recent activity transactions

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit adds pagination to the desktop transaction history view in Stack Wallet. It introduces a reusable paginated list widget and refactors the transaction list to use it, grouping CashFusion transactions and switching from unstable unique widget keys to stable keys based on transaction IDs. There is no security-relevant change visible in the diff.