AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 19 Bitcoin

wallet: Add CWallet::ExportWatchOnly

Public commit record

What the developer wrote

Authored by Ava Chow

58/100 · Thin
wallet: Add CWallet::ExportWatchOnly

ExportWatchOnly produces a watchonly wallet file from a CWallet. This
can be restored onto another instance of Bitcoin Core to allow that
instance to watch the same descriptors, and also have all of the same
initial address book and transactions.
✓ Descriptive subject✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit adds a new Bitcoin Core feature that lets a user export a copy of their wallet containing only public information (watch-only). It creates a separate wallet file with descriptors, address book, transactions, and locked coins, but explicitly excludes private keys. The change is a feature addition, not a fix for a known vulnerability. There is no evidence in the commit or supplied references that this is a security patch or that it addresses any reported security issue.

Recommended action

No immediate security action required. Treat as normal feature code review. If deploying, verify that exported watch-only wallets do not contain unexpected private material and that destination path permissions prevent unauthorized reads of the exported file.

Security signals we found

01

Feature addition for watch-only wallet export

02

Private keys explicitly excluded via WALLET_FLAG_DISABLE_PRIVATE_KEYS and export_private=false

03

Exported descriptors validated to contain no private keys (CHECK_NONFATAL dummy_keys.keys.size() == 0)

04

Destination file existence and writability checked before creating wallet

05

Cleanup handlers remove partial/temporary files on failure

06

No vendor disclosure of security relevance in commit message or diff

Risk score

Why this scored 19/100

Our methodology →
Potential impact 2/30
Exploitability 2/25
Stealth signal 2/15
Affected reach 3/15
Confidence 7/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.