TZ
← All projectsTrezor

Trezor firmware

Firmware monorepo for Trezor One, Model T, and Safe devices.

BitcoinHardware walletsNormal
Repository coverage

2665 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

919security candidates311second-pass queue2658AI analyses
332commits · 30 days
570commits · 60 days
1366commits · 180 days
2650commits · 365 days
Backfill bands
Aug 5 → Feb 61298 seen115 candidatesComplete
Feb 6 → Jun 6775 seen58 candidatesComplete
Jun 6 → Jul 6217 seen13 candidatesComplete
Jul 6 → Aug 5360 seen54 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

66/100 average clarity
476Strong · 80–100
1321Adequate · 60–79
863Thin · 40–59
5Opaque · 0–39
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
tychovrahe292104292461
Roman Zeyde575179573271
PrisionMike945994273
Andrew Kozlik712470265
obrusvit21376213164
Jakub Janků22919182
Martin Pastyřík23823173
cepetr19682196059
Ioan Bizău23076230059
M1nd3r20772207071
Lukas Bielesch846784067
Martin Milata17446174063
Analysis record

Published AI watches

Last scanned 20 minutes ago

Low 27 AI analysisMessage 93 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(core): digest EIP-1559/EIP-7702 magic without RLP encoding

This commit is a small internal cleanup in Trezor's Ethereum signing code. It changes how two special 'magic' bytes (the transaction type markers for newer Ethereum transaction formats) are fed into the cryptographic hash. Previously the c…

Refactor of cryptographic hashing path for Ethereum transaction signingRemoval of implicit assumption that RLP encodes small integers as single bytesChange affects EIP-1559 and EIP-7702 transaction type markers
2362bc6fby Roman Zeyde+6−32 files
No security note in commit
Informational 15 AI analysisMessage 98 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

test(core): test RLP self-encoding bytestrings

This commit only adds a new unit test to the Trezor firmware codebase. It verifies that very short Ethereum RLP-encoded byte strings and small positive integers encode to themselves, which is a known property of the RLP specification. No p…

41538733by Roman Zeyde+16−01 file
No security note in commit
Informational 18 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core): remove sha1 from regular FW

This commit removes the SHA-1 hashing function from the regular Trezor firmware. SHA-1 is an old, weak hash algorithm that is no longer considered secure for sensitive uses. The change deletes the code that exposes SHA-1 to apps running on…

Removal of a deprecated cryptographic primitive (SHA-1) from the firmware API surfaceReduction of attack surface and prevention of future misuse of a collision-vulnerable hashNo direct vulnerability patch or memory-safety bug is present in the diff
16d15774by M1nd3r+0−2006 files
No security note in commit
Low 27 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(crypto): pass static public key to `noise_xxpsk3_*_init()`

This commit changes how a cryptographic library sets up secure connections. Previously, the code automatically calculated the public key from the private key. Now, the caller must provide the public key directly. This is a code-quality ref…

Cryptographic key handling changed: public key is now supplied rather than derivedPotential reduction of key-mismatch risk if caller provides correct public keyNew null-pointer check added for static_public_key
1b3128a4by Ondřej Vejpustek+20−92 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(crypto): change order of parameters

This commit simply reorders the arguments of an internal function called dh() and updates every place that calls it. The actual math and security behavior are unchanged; it is a code cleanup with no security effect.

33a119eeby Ondřej Vejpustek+15−151 file
No security note in commit
Informational 15 AI analysisMessage 47 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(crypto): prefix enums

This commit simply renames two groups of internal status labels (called enums) in the Trezor firmware's cryptographic code. The old names like WAITING_FOR_REQUEST1 were shared between two different parts of the code, so the developer gave …

f1c74046by Ondřej Vejpustek+26−222 files
No security note in commit
Low 37 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(crypto): prevent calling `memzero(NULL, ...)`

This commit fixes three places in the Trezor firmware's cryptographic code where a memory-clearing function could be called with a NULL pointer. In practice, passing NULL to memzero is harmless on Trezor's platform (it does nothing), but i…

NULL pointer passed to memory-zeroing helper in cryptographic codeUndefined behavior in C standard library contractDefensive hardening in Noise protocol implementation
0394e934by Ondřej Vejpustek+11−51 file
No security note in commit
Informational 18 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(crypto): return remote static key from `noise_xxpsk3_*_handle_*()`

This commit is a code cleanup (refactor) for the cryptographic handshake code used in Trezor devices. It changes how the other party's long-term public key is returned to the caller: instead of storing it inside an internal state structure…

Removal of long-term public key storage from internal handshake stateCaller-supplied output buffer for remote static public key reduces internal secret retentionError-path memzero of returned key material on failure
3ead1aa6by Ondřej Vejpustek+79−423 files
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): rename ProjectProfile to ProjectConfig

This commit is a simple rename from 'ProjectProfile' to 'ProjectConfig' in two Rust source files. It only changes variable names, struct names, and error messages. There is no change to program logic, security behavior, or how data is hand…

581b37bcby cepetr+18−182 files
No security note in commit
Informational 15 AI analysisMessage 47 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): introduce ResolvedBuildArgs

This commit is a straightforward internal code refactor in Trezor's build tooling. It introduces a new ResolvedBuildArgs structure that centralizes default values for command-line build options before they are used. There is no change to u…

c24d1be8by cepetr+99−295 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): make build args tristate

This commit is a straightforward internal refactor of the Trezor firmware build tool's command-line argument handling. It changes many on/off flags from plain booleans to optional booleans so they can explicitly be set to true, false, or l…

271e249aby cepetr+57−561 file
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): introduce build options

This commit is a straightforward internal code reorganization in Trezor's build tooling. It moves build-option definitions from one Rust source file to a new module and adds the ability to load those options from a configuration file. Ther…

75085e2aby cepetr+275−2007 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(xtask): introduce build presets

This commit is a developer tooling change for the Trezor firmware build system. It introduces 'build presets'—named configuration bundles stored in TOML files—so developers can select common build settings with a single command-line flag i…

eefe8f7fby cepetr+397−419 files
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(xtask): upgrade manifest.yaml for tf-tools 0.3.0

This commit is a routine update to a build-system manifest file used by Trezor's internal tooling. It reorganizes and re-labels feature flags (for example, moving options between 'Features', 'Debugging', and 'Signing' groups and simplifyin…

57b28b89by cepetr+86−1351 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core): add tf-tools 0.3.1+ configuration file

This commit adds a single configuration file for a Trezor developer tool (a VS Code extension). It only points the tool to existing folders in the repository and contains no executable code, no secrets, and no changes to firmware behavior.…

e554f618by cepetr+8−01 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): rename ResolvedBuild to ResolvedBuildFeatures

This commit is a simple internal code cleanup: it renames a Rust data structure called ResolvedBuild to ResolvedBuildFeatures and updates the places that use it. There are no functional changes, no security fixes, and no changes to how the…

aaa2780bby cepetr+5−52 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core): fix up clippy warnings in storage.rs

This is a tiny code cleanup commit that replaces two calls to `ptr::null()` with Rust's `unwrap_or_default()` to silence automated Clippy lint warnings. It does not change what value is produced (still a null pointer when no salt is provid…

62354461by cepetr+2−21 file
No security note in commit
Informational 15 AI analysisMessage 47 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): simplify dependencies

This commit is a straightforward internal code cleanup in Trezor's build tooling. It moves a data structure and two helper methods from one Rust source file to another and updates callers accordingly. There is no change to user-facing beha…

6268349fby cepetr+9−193 files
No security note in commit
Informational 15 AI analysisMessage 47 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

docs: add xtask documentation

This commit only adds documentation. It updates the table of contents and adds a new markdown page plus a diagram explaining the project's 'xtask' build helper. No code, build scripts, or firmware logic was changed, so it cannot introduce …

4879dababy cepetr+296−03 files
No security note in commit
Informational 17 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(xtask): introduce project-toml build-options

This commit is a build-system refactoring for Trezor firmware. It moves the mapping of command-line build options to Rust/cargo features out of hard-coded Rust logic and into per-project TOML files. It also adds a small change so debug bui…

Build-option mapping now lives in project.toml files, increasing the attack surface for supply-chain/build-configuration tamperingMakefile change automatically enables debug-link for PYOPT=0 debug buildsValidation added to reject storage_insecure_testing_mode in production builds
d44de007by cepetr+681−40817 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

AI review queuedrefactor(ethereum): multiple tokens can be unknownby Ioan Bizău · 7e66cf2b · Mar 24, 2026 · 1 fileMessage 62 · AdequateLow 27Details
Commit message · Ioan Bizău

refactor(ethereum): multiple tokens can be unknown

[no changelog]

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Low 27/100

This commit refactors how Trezor firmware handles unknown Ethereum tokens when showing transaction details on screen. Previously, if a transaction involved an unknown token, the device showed one generic warning. After this change, the code can detect and warn about multiple unknown tokens within a single transaction's data. It is a defensive code improvement rather than a fix for a known exploit.

AI review queuedfeat(ethereum): slicing inside iterable parametersby Ioan Bizău · 2c5d8b09 · Mar 24, 2026 · 1 fileMessage 62 · AdequateLow 28Details
Commit message · Ioan Bizău

feat(ethereum): slicing inside iterable parameters

[no changelog]

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Low 28/100

This commit updates the Trezor Ethereum app's 'clear signing' feature so it can handle data formats that slice inside arrays or structs (for example, taking only a portion of a list). It is a small feature addition, not a fix for a known security bug. There is no evidence in the commit or supplied references that this resolves an active vulnerability.

AI review queuedfeat(ethereum): parsing dynamic values in calldataby Ioan Bizău · e666d62b · Mar 24, 2026 · 9 filesMessage 77 · AdequateLow 38Details
Commit message · Ioan Bizău

feat(ethereum): parsing dynamic values in calldata

* extend calldata parsing to support strings, structs, arrays and more

[no changelog]

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Low 38/100

This commit is a feature expansion for Trezor's Ethereum 'clear signing' system, which decodes smart-contract call data so users see human-readable details instead of raw hex. It adds support for dynamic Solidity types such as strings, byte arrays, structs, and arrays. The change is large and refactors how transaction data is parsed and presented. It does not appear to be a disclosed security fix, but because it handles untrusted transaction data, any parsing bugs could in principle let a malformed transaction bypass warnings or crash the device. The diff itself shows explicit bounds checks and validation, which is a positive sign, but the new code paths are complex and have not been externally audited in the provided materials.

Security candidatechore(tests): test swap clear signingby Ioan Bizău · 24552c41 · Mar 24, 2026 · 2 filesMessage 67 · AdequateInformational 15Details
Commit message · Ioan Bizău

chore(tests): test swap clear signing

[no changelog]

67/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
signing boundarysigning or wallet path
AI analysis · Informational 15/100

This commit only adds new test cases for Ethereum transaction signing on Trezor hardware wallets. It includes sample swap transactions from services like 1inch, LiFi, and Uniswap, plus a large-data test case. There is no change to the actual firmware or wallet code—only test data and a test list are added. It does not introduce or fix a security vulnerability.

Security candidatefix(ethereum): render unoswap pools as raw bytesby Ioan Bizău · 295a9b15 · Mar 24, 2026 · 2 filesMessage 80 · StrongLow 37Details
Commit message · Ioan Bizău

fix(ethereum): render unoswap pools as raw bytes

The `pools` parameter is not an `uint256[]` like the clear signing
registry claims - that being just an optimization to save on gas fees
and keeping the compiler happy by compiling (no pun intended) more
information into a field. So the best we can do for now is to render the
field as a raw value.

[no changelog]

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
signing boundarysigning or wallet path
AI analysis · Low 37/100

This commit fixes how Trezor displays details for certain 1inch cryptocurrency swap transactions. Previously, the device tried to interpret a parameter called 'pools' as a list of plain numbers, but it actually contains packed binary data. The change makes the device show the raw bytes as hexadecimal instead of trying to decode them as numbers. This is a display/clarity fix rather than a direct theft-of-funds bug, but mis-displaying swap details could in theory help an attacker trick a user into approving a malicious transaction.

Lower-prioritychore: update fixturesby Ioan Bizău · 0d6716bb · Mar 24, 2026 · 1 fileMessage 40 · ThinInformational 15Details
Commit message · Ioan Bizău

chore: update fixtures

[no changelog]

40/100 · ThinMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only updates expected test screenshots (called 'fixtures') for the Trezor firmware's user-interface test suite. It does not change any firmware code, cryptographic logic, or device behavior. The updated hashes reflect new/altered test cases for Ethereum transaction signing, including 'clear_sign' scenarios for Uniswap and LI.FI swaps, plus routine hash changes for existing token approval and definition tests across languages. There is no direct security issue in this commit itself.

Security candidatechore(core/eckhart): add SA and UAE to Regulatoryby obrusvit · a71f3e51 · Mar 24, 2026 · 8 filesMessage 57 · ThinInformational 15Details
Commit message · obrusvit

chore(core/eckhart): add SA and UAE to Regulatory

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This commit simply adds two new countries, South Africa and the United Arab Emirates, to the regulatory information screen on Trezor's Eckhart hardware wallet layout. It includes new flag icons, updates the list of regulatory zones, and refreshes automated test snapshots. There is no security-relevant change.

Security candidatefeat(eckhart): change homebar style with notifby obrusvit · f8eb0841 · Mar 24, 2026 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · obrusvit

feat(eckhart): change homebar style with notif

- when we have a notification, the ActionBar starts with a default style
and only changes after the notification toggles (LED and LED sim
appears)
- the same applies if the Notification is not actionable and we show it
in the Hint. It's rendered only after the LED toggles
- after LED turns off, the ActionBar stays with the new style with the
actionable text, if we use Hint, it also stays rendered
- if animations are disabled, everything appears at once at the
beginning and stays that way. No toggling.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
boot or update path
AI analysis · Informational 15/100

This commit is a user-interface polish change for the Trezor hardware wallet's homescreen. It changes when notification-related buttons and hints appear on screen, making them show up only after a small LED indicator toggles, unless animations are disabled or the notification is an alert. There is no security-relevant behavior in the change.

Security candidaterefactor(core): simplify FuelGauge Componentby obrusvit · 92215f58 · Mar 24, 2026 · 3 filesMessage 72 · AdequateInformational 11Details
Commit message · obrusvit

refactor(core): simplify FuelGauge Component

- remove the Homebar variant and replace it with AlwaysOnlyIcon
- remove the `with_alignment` builder

[no changelog]

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Why it was queued
boot or update path
AI analysis · Informational 11/100

This commit is a routine user-interface cleanup for the Trezor hardware wallet's battery icon. It removes an older 'HomescreenBar' display mode and replaces it with a simpler 'AlwaysIconOnly' mode, while also dropping an alignment option. There is no indication in the commit that this fixes a security bug or changes security behavior.

Security candidatefeat(eckhart): improve homescreen informationby obrusvit · fe6664f6 · Mar 24, 2026 · 11 filesMessage 80 · StrongInformational 18Details
Commit message · obrusvit

feat(eckhart): improve homescreen information

- remove HomeLabel Component and replace with different helper
components
- add connected indicator and fuel gauge
- adjust Homescreen label and animate it
- changed font and positioning

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
boot or update path
AI analysis · Informational 18/100

This commit is a user-interface refresh for the Trezor T3W1 device homescreen. It adds a battery icon, a connection indicator, and makes notification labels interactive when relevant. There is no direct evidence of a security vulnerability being fixed or introduced; the changes are primarily cosmetic and structural.

Security candidatefeat(eckhart): fix some misalignment issuesby obrusvit · af038872 · Mar 24, 2026 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · obrusvit

feat(eckhart): fix some misalignment issues

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This commit makes small visual adjustments to the Trezor hardware wallet's homescreen layout. It tweaks pixel alignment of status icons and fixes how a shadow behind a scrolling label moves during animation. There is no security-relevant change.

Security candidateperf(eckhart): compute less in render functionsby obrusvit · d2727506 · Mar 24, 2026 · 3 filesMessage 80 · StrongInformational 13Details
Commit message · obrusvit

perf(eckhart): compute less in render functions

- cache the rendering data in `FuelGauge::event` and
`HomescreenStatus::event` and `render_connection_indicator`
- cache the rendering data in `HintContent::PageCounter`
- also fix a small misalignment in HomescreenStatus label

[no changelog]

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
boot or update path
AI analysis · Informational 13/100

This commit is a straightforward performance optimization for the user interface on Trezor's newer 'Eckhart' layout. It pre-calculates and stores values like battery percentage text and page counter positions so they don't have to be recomputed every time the screen is redrawn. It also fixes a minor visual alignment issue with a small connection indicator dot. There is no indication this change fixes a security vulnerability.

Security candidaterefactor(eckhart): fix bld buildby obrusvit · bfa02f17 · Mar 24, 2026 · 2 filesMessage 57 · ThinInformational 15Details
Commit message · obrusvit

refactor(eckhart): fix bld build

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This is a routine build-fix refactor for the Trezor hardware wallet's bootloader UI. It removes the 'const' keyword from a few Rust functions and splits a battery icon rendering helper so the bootloader build succeeds. There is no security-relevant change visible in the diff.

Security candidatefeat(eckhart): connected indicator in DeviceMenuby obrusvit · 7eb49d11 · Mar 24, 2026 · 4 filesMessage 57 · ThinInformational 12Details
Commit message · obrusvit

feat(eckhart): connected indicator in DeviceMenu

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 12/100

This commit is a user-interface feature for the Trezor hardware wallet. It adds a small visual indicator (a connection icon) next to the 'Connected' / 'Disconnected' status in the device menu and makes the menu refresh when USB or Bluetooth connection state changes. There is no evidence in the diff of a security vulnerability, exploit, or bug fix.

Security candidatefix(eckhart): implement Hint::width variantsby obrusvit · 2b53bf61 · Mar 24, 2026 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · obrusvit

fix(eckhart): implement Hint::width variants

- plus some other minor changes

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This is a routine UI layout fix for the Trezor hardware wallet. It adds missing width-calculation helpers to a 'Hint' widget, removes an unused background padding object, and tidies how a page-counter is rendered. There is no security-relevant change visible in the diff.

Lower-priorityrefactor(core): make FuelGauge soc non-optionalby obrusvit · a1054558 · Mar 24, 2026 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · obrusvit

refactor(core): make FuelGauge soc non-optional

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This is a small internal code cleanup in the Trezor firmware's battery indicator. It changes the battery charge level from an optional value (which could be missing) to a regular number that defaults to 0. There is no security issue visible in the change.

Lower-priorityfeat(eckhart): introduce ConnectionIndicatorby obrusvit · a6d3b370 · Mar 24, 2026 · 5 filesMessage 47 · ThinInformational 15Details
Commit message · obrusvit

feat(eckhart): introduce ConnectionIndicator

[no changelog]

47/100 · ThinMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit adds a new on-screen status icon for the Trezor hardware wallet's Eckhart layout. The icon simply shows whether the device is currently connected via USB or Bluetooth. It is purely a user-interface change and does not alter how the device handles secrets, transactions, or security checks.

Lower-prioritychore(core): update fixturesby obrusvit · d25d9f77 · Mar 24, 2026 · 1 fileMessage 47 · ThinInformational 15Details
Commit message · obrusvit

chore(core): update fixtures

47/100 · ThinMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only updates a test data file (tests/ui_tests/fixtures.json) containing expected hash values for user-interface tests. It does not change any firmware code, cryptographic logic, or device behavior. There is no security-relevant change visible in the diff.

Lower-prioritytest(core): fix failing click testby obrusvit · 498c96cf · Mar 24, 2026 · 1 fileMessage 67 · AdequateInformational 15Details
Commit message · obrusvit

test(core): fix failing click test

67/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This is a one-line change to a test file. It loosens a test assertion so that the homescreen check passes when the model name appears anywhere on screen, rather than requiring the screen content to be exactly the model name. It does not change any firmware code or device behavior.

Lower-priorityrefactor(core): use interact for ui.Layoutby Roman Zeyde · d9d1aed6 · Mar 24, 2026 · 2 filesMessage 57 · ThinInformational 12Details
Commit message · Roman Zeyde

refactor(core): use interact for ui.Layout

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 12/100

This is a small internal code cleanup in the Trezor firmware's user-interface layer. It changes how one screen (the device menu) is launched so it uses a shared helper function called `interact`, rather than manually creating and tearing down a layout object. There is no indication this fixes or introduces a security vulnerability.

AI review queuedchore(translations): updated fixtures [no changelog]by Michal Kazda · 800147fb · Mar 24, 2026 · 3 filesMessage 77 · AdequateInformational 15Details
Commit message · Michal Kazda

chore(translations): updated fixtures
[no changelog]

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit only updates German translation text and the corresponding test snapshots (expected screen hashes). It removes a few old variant translations for the term 'hidden wallet' and standardizes it to 'Passphrase-Wallet'. There is no code change and no security relevance.

Security candidatechore(common): rename BackupMethod fieldby Roman Zeyde · 127039f9 · Mar 24, 2026 · 6 filesMessage 80 · StrongInformational 15Details
Commit message · Roman Zeyde

chore(common): rename BackupMethod field

Following https://satoshilabs.slack.com/archives/C02V2PSDNA2/p1774310387497969.

[no changelog]

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
Why it was queued
cryptography-sensitive path
AI analysis · Informational 15/100

This commit is a simple internal rename of a field called 'method' to 'backup_method' across several files. It does not change how the device works, what data it stores, or how users interact with it. There is no security issue visible in this change.

Lower-priorityfix(python): don't pair when auto-connected after unlockingby Roman Zeyde · 18da30cf · Mar 24, 2026 · 2 filesMessage 70 · AdequateLow 33Details
Commit message · Roman Zeyde

fix(python): don't pair when auto-connected after unlocking

Fixes #6633.

70/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body
AI analysis · Low 33/100

This commit fixes a bug in the Trezor Python library's pairing flow for Trezor Host Protocol (THP). Before the fix, the code could check whether a device was already paired without first ensuring a communication channel was open. The fix explicitly opens the connection first and skips pairing if the device is already paired. The changelog describes it as fixing auto-connection after unlocking the device. There is no direct evidence in the commit of a security vulnerability being exploited.

AI review queuedchore(translations): sync Crowdin translations [no changelog]by Michal Kazda · 0065caa1 · Mar 24, 2026 · 6 filesMessage 77 · AdequateInformational 15Details
Commit message · Michal Kazda

chore(translations): sync Crowdin translations
[no changelog]

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Why it was queued
signing or wallet pathtranslation-only discountsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit only updates translated text strings in the Trezor firmware. It adds new translations (for example, phrases like 'Confirm contract' and 'Intent' in several languages), fixes existing wording, and refreshes the translation signature file. There are no code changes that affect security, cryptography, or device behavior.

AI review queuedchore(translations): updated fixtures [no changelog]by Michal Kazda · 32ff27b3 · Mar 24, 2026 · 3 filesMessage 77 · AdequateInformational 15Details
Commit message · Michal Kazda

chore(translations): updated fixtures
[no changelog]

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a routine maintenance update for translation files and test snapshots. It changes one French translation string, updates a cryptographic signature record for the translation set, and refreshes many expected visual test hashes. There is no code change that affects security functionality, and nothing in the commit suggests it fixes or introduces a vulnerability.