AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 42 Bitcoin

size an unresolved silent payment output as the p2tr output it becomes when deriving the fee

Public commit record

What the developer wrote

Authored by Craig Raw

50/100 · Thin
size an unresolved silent payment output as the p2tr output it becomes when deriving the fee
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
The short version

What changed, and why it matters

This commit fixes how Sparrow Wallet calculates transaction size and fees for silent-payment transactions before they are fully signed. Previously, the wallet treated an unresolved silent-payment output as if it took up no space, which made the displayed transaction size, fee rate, and effective fee rate look smaller than they would be once broadcast. The fix sizes these outputs as the Taproot (P2TR) outputs they become after signing, so fee calculations and warnings match reality.

Recommended action

Treat as a low-severity correctness fix. Users relying on pre-sign fee-rate estimates for silent-payment sends should upgrade so displayed and warned fee rates match the final broadcast transaction. No immediate incident response is indicated from the diff alone.

Security signals we found

01

Silent payment output script not yet resolved at fee-estimation time

02

Fee-rate display and high-fee warning used under-sized transaction

03

Potential for user to broadcast a transaction with a higher effective fee rate than shown

04

Fix adds SilentPayment.OUTPUT_SCRIPT_LENGTH to virtual size for unresolved outputs

Risk score

Why this scored 42/100

Our methodology →
Potential impact 12/30
Exploitability 5/25
Stealth signal 8/15
Affected reach 7/15
Confidence 7/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.