AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Moderate 57 Bitcoin

adb: add missing cache invalidation sites for transitions to/from unverified

Public commit record

What the developer wrote

Authored by Sander van Grieken

50/100 · Thin
adb: add missing cache invalidation sites for transitions to/from unverified
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
The short version

What changed, and why it matters

This commit fixes missing cache invalidation in Electrum's wallet history code. When a transaction's status changed—such as when a confirmed transaction returned to the mempool after a blockchain reorganization—the wallet's internal caches were not always cleared. This could leave the wallet showing stale or inconsistent information, such as an outdated balance, an outdated transaction height, or a now-invalid 'short ID' used to identify coins. The fix adds explicit cache clearing at several state-transition points and includes tests demonstrating the problem.

Recommended action

Apply the patch and run the new unit tests. Users and services relying on Electrum balances or UTXO selection should upgrade to a release containing this fix, especially if operating in environments with frequent reorgs or untrusted servers, because stale data could lead to incorrect transaction construction or balance reporting.

Security signals we found

01

Stale cache after transaction state transition

02

Incorrect UTXO height/short_id after reorg or mempool eviction

03

Balance display inconsistency due to missing cache invalidation

04

State synchronization bug in wallet history tracking

Risk score

Why this scored 57/100

Our methodology →
Potential impact 18/30
Exploitability 10/25
Stealth signal 8/15
Affected reach 10/15
Confidence 7/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.