AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 26 Bitcoin

[Policy] Support raw transaction versions == 3

Public commit record

What the developer wrote

Authored by russeree

60/100 · Adequate
[Policy] Support raw transaction versions == 3

Co-authored-by: scgbckbone <scgbckbone@proton.me>
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
The short version

What changed, and why it matters

This commit updates the COLDCARD Bitcoin hardware wallet firmware to accept and sign transactions that use version 3 of the Bitcoin transaction format. Previously, the wallet only allowed versions 1 and 2. The change is framed as a new feature, not a security fix. It adds parsing and test support for v3 transactions, including a special case for 'ephemeral anchor' outputs that have a zero value and are expected to trigger a warning.

Recommended action

Review whether Bitcoin transaction version 3 introduces new consensus or policy rules (e.g., relative time locks, ephemeral anchors, or package relay behavior) that require additional validation beyond the version-number check. Confirm that existing fee, output-value, and locktime checks remain correct for v3 transactions before release.

Security signals we found

01

Transaction version whitelist expanded from {1,2} to {1,2,3}

02

New test covers v3 PSBT parsing and signing paths

03

Ephemeral anchor test vector triggers expected 'Non-standard zero value output(s)' warning

04

No additional input/output validation logic added alongside version expansion

05

ChangeLog labels this as a 'New Feature', not a security fix

Risk score

Why this scored 26/100

Our methodology →
Potential impact 5/30
Exploitability 3/25
Stealth signal 2/15
Affected reach 4/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.