Informational 15 Bitcoin Committed Oct 21, 2025 · 16:48 UTC

fastlane: revert full_description to plain text

224c5fa6 View source ↗

Public commit record

What the developer wrote

Authored by SomberNight

76/100 · Adequate

fastlane: revert full_description to plain text

Rich text does not work reliably.
This reverts to the old formatting, but keeps some of the reordering/text changes.
follow-up https://github.com/spesmilo/electrum/pull/9492

I compared looking at the description in:
- google play store app
- google play store website [1]
- fdroid app
- fdroid website [2]

notes:
- Links work on playstore website and fdroid website, but not in the apps.
In the apps, they are not even shown at all, they are just ignored.
- ul/li/b tags do not work on playstore website

[1] https://play.google.com/store/apps/details?id=org.electrum.electrum
[2] https://f-droid.org/en/packages/org.electrum.electrum/

✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference

The short version

What changed, and why it matters

This commit only changes the marketing description text shown for the Electrum app on Google Play and F-Droid. It switches from HTML-style formatting (like bold and bullet lists) back to plain text because the formatting did not display correctly on all platforms. There is no change to the actual wallet software or its security.

Recommended action

No security action needed. This is a routine documentation/formatting update for app store listings.

Security signals we found

No strong security signals were identified.

Technical analysis

Evidence from the diff

The diff modifies fastlane/metadata/android/en-US/full_description.txt, a metadata file used by app stores. It removes HTML tags (,

,
, ) and replaces them with plain-text bullets and raw URLs. The content is reworded slightly (e.g., ‘support of’ becomes ‘support for’, a new ‘Open-source’ bullet is added, and the support section is reorganized). No application code, dependencies, permissions, or security-sensitive configuration is touched.

Changed components
fastlane/metadata/android/en-US/full_description.txt

Inspect captured patch +15 / −18
diff --git a/fastlane/metadata/android/en-US/full_description.txt b/fastlane/metadata/android/en-US/full_description.txt index a1ceb6a..6b22887 100644 --- a/fastlane/metadata/android/en-US/full_description.txt +++ b/fastlane/metadata/android/en-US/full_description.txt @@ -1,21 +1,18 @@ -Electrum is a libre self-custodial Bitcoin wallet with support of the Lightning Network. +Electrum is a libre self-custodial Bitcoin wallet with support for the Lightning Network. It's secure, feature rich and trusted by the Bitcoin community since 2011. -Features: -<ul> -<li>Safe: Your private keys are encrypted and never leave your device.</li> -<li>Forgiving: Your wallet can be recovered from a secret phrase.</li> -<li>Instant On: Electrum uses servers that index the Bitcoin blockchain making it fast.</li> -<li>No Lock-In: You can export your private keys and use them in other Bitcoin clients.</li> -<li>No Downtimes: Electrum servers are decentralized and redundant. Your wallet is never down.</li> -<li>Proof Checking: Electrum Wallet verifies all the transactions in your history using SPV.</li> -<li>Cold Storage: Keep your private keys offline and go online with a watching-only wallet.</li> -</ul> +Features: +• Safe: Your private keys are encrypted and never leave your device. +• Open-source: MIT-licensed free/libre open-source software, with reproducible builds. +• Forgiving: Your wallet can be recovered from a secret phrase. +• Instant On: Electrum uses servers that index the Bitcoin blockchain making it fast. +• No Lock-In: You can export your private keys and use them in other Bitcoin clients. +• No Downtimes: Electrum servers are decentralized and redundant. Your wallet is never down. +• Proof Checking: Electrum Wallet verifies all the transactions in your history using SPV. +• Cold Storage: Keep your private keys offline and go online with a watching-only wallet. -Support: -<ul> -<li><a href="https://electrum.org">Official Website</a> has a detailed <a href="electrum.readthedocs.io/">documentation and FAQ</a></li> -<li><a href="https://github.com/spesmilo/electrum">Source code on GitHub</a></li> -<li>Support: Please use GitHub or email electrumdev@gmail.com to report bugs rather than the app rating system.</li> -<li>Please translate on <a href="https://crowdin.com/project/electrum">Crowdin</a></li> -</ul> +Links: +• Website: https://electrum.org (with documentation and FAQ) +• Source code: https://github.com/spesmilo/electrum +• Help us with translations: https://crowdin.com/project/electrum +• Support: Please use GitHub (preferred) or email electrumdev@gmail.com to report bugs rather than the app rating system.

Risk score
Why this scored 15/100
Our methodology →

Potential impact 0/30

Exploitability 0/25

Stealth signal 0/15

Affected reach 0/15

Confidence 10/10

Evidence quality 5/5

CommitWatch risk15/100 · Informational100% classification confidence

Accountability record
Developer
SomberNightStrong match
Message clarity
76 · Adequate
Security relevance disclosed
No
Researcher attribution
Not found
Vendor acknowledged
Not found

Analysis provenance
Generated by kimi-k2.7-code:cloud and published automatically. This is model output, not a human security finding.
Generated Aug 7, 2026 · Updated Aug 7, 2026

Human-validated context
Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

Add context
Submit a community note

Submissions are private until a human moderator validates them. Be specific and cite a primary source when possible.

Name or handleEmail (private, optional)Community noteSupporting source (optional) Email addresses are never published. Notes may be edited for clarity with meaning preserved.

More from Electrum
Related watches

Informational 15 AI analysisMessage 63 · Adequate
8 hours, 16 minutes ago

EL ElectrumElectrum BitcoinSoftware wallets

Merge pull request #10816 from accumulator/qml_auth_log_improvement

This commit is a minor logging cleanup in the mobile/QML authentication helper. It changes the wording and placement of debug/error log messages so they reveal the function name only after safely retrieving it, and avoids logging a raw tup…

8dddae68by ghost43+4−41 file

No security note in commit

Open full analysis →Source commit ↗

Moderate 51 AI analysisMessage 73 · Adequate
10 hours, 56 minutes ago

EL ElectrumElectrum BitcoinSoftware wallets

Merge pull request #10798 from SomberNight/202608_base43

This commit fixes a performance weakness in Electrum's handling of large Bitcoin transactions encoded in 'base43'. The base43 encoding and decoding functions run in quadratic time, meaning the work grows much faster than the input size. An…

Quadratic-time base43 encode/decode can be triggered on attacker-controlled inputDenial-of-service via CPU exhaustion / UI freeze on large transaction stringsInput-length cap added as a defensive guard, not a full algorithmic fix

0e9f1a0dby Felix+25−92 files

No security note in commit

Open full analysis →Source commit ↗

Low 41 AI analysisMessage 73 · Adequate
14 hours, 29 minutes ago

EL ElectrumElectrum BitcoinSoftware wallets

Merge pull request #10799 from SomberNight/202608_android_secure_window

This update tightens a privacy feature on Electrum's Android app that prevents the screen from being captured while sensitive Bitcoin private keys or seed phrases are visible. Before, the protection could be accidentally turned off when mu…

Adds visibility-gated secureWindow bindings to protect WIF keys and seed phrasesPrevents secureWindow from being cleared when multiple sensitive dialogs are stackedTargets Android screenshot/recents-thumbnail protection surface

4622390cby accumulator+17−05 files

Vendor flagged security relevance

Open full analysis →Source commit ↗

CommitWatch
Independent eyes on open-source change.

Scoring methodology Developer activity Corrections & challenges Public JSON feed RSS Support with Bitcoin Contact

Monitoring public repositories Analysis is informational, not a substitute for a vendor advisory or professional security review.

© 2026 CommitWatch A free public service by Karma-X Inc. Every patch tells a story.