ER
← Watched projectsVendor accountability

electrs

Vendor website ↗
Security hygiene0/100 · Insufficient dataPreliminary score
How the vendor scores

Security hygiene breakdown

Disclosure quality 0/100
Researcher acknowledgement 0/100
Security process 0/100
Patch clarity 0/100
Response quality 0/100
Accountability record

Recent watches

Informational 15 AI analysisMessage 28 · Opaque
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Release 0.12.0

This commit is a routine version bump from 0.11.1 to 0.12.0 in the project's package metadata files. It changes only the version number strings in Cargo.toml and Cargo.lock. There is no code change, no bug fix, and no security-related cont…

37501cc4by Roman Zeyde+2−22 files
No security note in commit
Informational 15 AI analysisMessage 38 · Opaque
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Add 0.12.0 changelog

This commit only adds a new section to the RELEASE-NOTES.md file describing version 0.12.0. It lists user-visible changes such as a new indexing dependency, API fixes, a new SECURITY.md file, and routine dependency updates. No program code…

6c763137by Roman Zeyde+8−01 file
No security note in commit
Informational 15 AI analysisMessage 76 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Bump log from 0.4.33 to 0.4.34

This is an automated patch by Dependabot that updates the 'log' programming library from version 0.4.33 to 0.4.34. The change only updates a version number and cryptographic checksum in the project's dependency lock file. There is no indic…

264e8cb8by dependabot[bot]+2−21 file
No security note in commit
Informational 15 AI analysisMessage 33 · Opaque
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Add SECURITY.md

This commit only adds a SECURITY.md file to the project. It is a documentation-only change that explains the project's security policy and how to report vulnerabilities. No code was changed, and no security vulnerability was fixed or intro…

da1860e6by Roman Zeyde+14−01 file
No security note in commit
Informational 15 AI analysisMessage 76 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Bump crossbeam-channel from 0.5.15 to 0.5.16

This is a routine automated patch by Dependabot that updates a single Rust dependency, crossbeam-channel, from version 0.5.15 to 0.5.16. The change only modifies the recorded version and cryptographic checksum in the project's lock file. T…

00b85822by dependabot[bot]+2−21 file
No security note in commit
Informational 15 AI analysisMessage 76 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Bump serde_json from 1.0.150 to 1.0.151

This is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.150 to 1.0.151. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication …

b69f1a57by dependabot[bot]+2−21 file
No security note in commit
Informational 15 AI analysisMessage 45 · Thin
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Update documentation for the upcoming release

This commit only updates user-facing documentation and a helper shell script for an upcoming release. It changes wording in setup guides, replaces old example output with newer version numbers, and switches the default database directory i…

9cd09afaby Roman Zeyde+62−1176 files
No security note in commit
Informational 15 AI analysisMessage 76 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Bump log from 0.4.29 to 0.4.33

This is an automated dependency update by Dependabot that bumps the Rust `log` crate from version 0.4.29 to 0.4.33. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication in t…

9175b0f9by dependabot[bot]+2−21 file
No security note in commit
Informational 15 AI analysisMessage 45 · Thin
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Update bitcoind release in CI

This commit simply updates the version of Bitcoin Core used in the project's automated testing environment from a release candidate (31.0rc2) to the final stable release (31.1). It is a routine CI/infrastructure maintenance change with no …

eed01b98by Roman Zeyde+4−41 file
No security note in commit
Informational 15 AI analysisMessage 28 · Opaque
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Require latest bitcoind

This commit only updates a single line in the installation documentation, changing the recommended minimum version of Bitcoin Core from 0.21+ to 31.0+. There is no code change, no bug fix, and no security patch in the diff itself.

c0a4b3faby Roman Zeyde+1−11 file
No security note in commit
Informational 11 AI analysisMessage 45 · Thin
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Allow setting REST server URL

This commit is a routine feature update. It upgrades a dependency called bindex from version 0.1.1 to 0.1.2 and changes the code to pass a configurable REST server URL into the indexing component. There is no indication in the commit that …

1255a377by Roman Zeyde+6−53 files
No security note in commit
Informational 15 AI analysisMessage 72 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

docs: fix beta Debian repository links

This commit fixes broken documentation links. It changes three Markdown links from an incorrect anchor name (binaries.md#cnative-os-packages) to the correct one (binaries.md#native-os-packages). There is no code change and no security rele…

31c3fc5bby haoshengzhen+3−32 files
No security note in commit
Informational 15 AI analysisMessage 76 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Bump serde_json from 1.0.149 to 1.0.150

This is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.149 to 1.0.150. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication …

ca254cb5by dependabot[bot]+2−21 file
No security note in commit
Informational 15 AI analysisMessage 76 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Bump bytes from 1.11.0 to 1.11.1

This is a routine automated dependency update by Dependabot, bumping the Rust 'bytes' library from version 1.11.0 to 1.11.1. Only the Cargo.lock file changed. There is no indication in the commit of any security fix, bug fix, or behavior c…

d889624fby dependabot[bot]+2−21 file
No security note in commit
Low 25 AI analysisMessage 76 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Bump jsonrpc from 0.18.0 to 0.20.1

This is a routine dependency update by Dependabot that upgrades the jsonrpc library used by the electrs Bitcoin server from version 0.18.0 to 0.20.1. The change also removes an older copy of the base64 library from the dependency tree. Dep…

Dependency version bump of a networking/RPC crateRemoval of an older transitive dependency (base64 0.13.1) in favor of a newer version (base64 0.22.1)No explicit security claim or CVE reference in commit or supplied materials
acf4b98dby dependabot[bot]+6−122 files
No security note in commit
Low 32 AI analysisMessage 28 · Opaque
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Switch to `bindex`

This is a large refactoring commit that replaces electrs's custom Bitcoin indexing, chain tracking, P2P networking, and RocksDB storage code with a new external library called `bindex`. It removes thousands of lines of in-house code (index…

Large architectural refactor replacing core indexing/storage/networking subsystemsRemoval of in-house P2P Bitcoin protocol implementation (reduced custom network parsing attack surface)Switch from bitcoincore-rpc to direct jsonrpc usage (custom deserialization of RPC responses)
0fe14fdfby Roman Zeyde+450−282724 files
No security note in commit
Informational 15 AI analysisMessage 76 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Bump bitcoin from 0.32.8 to 0.32.9

This is an automated patch by Dependabot that updates the 'bitcoin' Rust library used by the electrs project from version 0.32.8 to 0.32.9. Only version and checksum numbers changed in the dependency list; no project source code was modifi…

32e5944aby dependabot[bot]+3−32 files
No security note in commit
Informational 15 AI analysisMessage 76 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Bump rayon from 1.11.0 to 1.12.0

This is a routine automated dependency update by Dependabot that bumps the 'rayon' Rust library from version 1.11.0 to 1.12.0. The change only updates version numbers in the project's package manifest and lock file. There is no indication …

d81dc35aby dependabot[bot]+3−32 files
No security note in commit
Informational 12 AI analysisMessage 50 · Thin
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Revert "Support Unix sockets"

This commit simply removes a previously added feature: support for Unix domain sockets. It reverts the code back to using only standard TCP network sockets. There is no indication in the commit itself that this is a security fix, and the c…

c134d64dby Roman Zeyde+29−18410 files
No security note in commit
Low 29 AI analysisMessage 68 · Adequate
ER electrselectrs BitcoinIndexing infrastructureSoftware wallets

Support Unix sockets

This commit adds support for Unix domain sockets to the electrs Bitcoin Electrum server. The main security benefit is that administrators can use filesystem permissions to control which local users or processes can connect, instead of rely…

Adds Unix domain socket support, enabling filesystem-permission-based access control for RPC and metrics endpointsIntroduces public_addr option to decouple bound listening address from advertised Electrum server address (relevant for NAT/SSH tunnels)Adds cleanup of Unix socket path on accept-loop termination
898e57dcby Martin Habovstiak+184−2910 files
No security note in commit