SFT-7182: added coconut wallet to manifest, needs testing on hardware
What changed, and why it matters
This commit simply adds a new Bitcoin wallet integration file named 'coconut.py' to the firmware build list. It is a one-line manifest change with no visible security implications on its own.
No security action required for this commit specifically. When reviewing the related wallet implementation in wallets/coconut.py, verify that address derivation, message signing, and PSBT handling follow the same defensive patterns used by other wallet modules.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies ports/stm32/boards/Passport/manifest.py to include ‘wallets/coconut.py’ in the MicroPython freeze list. This causes the new wallet module to be compiled into the firmware image. The actual wallet implementation is not shown in this diff, so no security assessment of the wallet code itself is possible from this commit alone.
Changed components
ports/stm32/boards/Passport/manifest.pyInspect captured patch +1 / −0
diff --git a/ports/stm32/boards/Passport/manifest.py b/ports/stm32/boards/Passport/manifest.py
index b3ab807..d5f74be 100644
--- a/ports/stm32/boards/Passport/manifest.py
+++ b/ports/stm32/boards/Passport/manifest.py
@@ -348,6 +348,7 @@ freeze('$(MPY_DIR)/ports/stm32/boards/Passport/modules',
'wallets/bull.py',
'wallets/caravan.py',
'wallets/casa.py',
+ 'wallets/coconut.py',
'wallets/coinbits.py',
'wallets/constants.py',
'wallets/dux_reserve.py',
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.