use precise fee rates estimate from mempool.space
What changed, and why it matters
This commit changes the Bitcoin fee-rate data source used by Sparrow Wallet from mempool.space's standard recommended-fee endpoint to its more precise fee-estimate endpoint. It is a minor data-source change, not a code-level security fix. There is no indication in the commit that this resolves a security vulnerability.
No security action required. Treat as a normal functional/data-quality update. If desired, verify that the /v1/fees/precise endpoint returns data in the same JSON schema as /v1/fees/recommended so that getThreeTierFeeRates() continues to parse it correctly.
Security signals we found
No security-related keywords in commit title or message
No change to authentication, cryptography, input validation, or network trust model
Endpoint change to a different API path on the same third-party service (mempool.space)
No CVE, advisory, or researcher attribution present in commit materials
Evidence from the diff
The single-line change updates FeeRatesSource.java for the MEMPOOL_SPACE enum so that getBlockTargetFeeRates() calls mempool.space’s /v1/fees/precise endpoint instead of /v1/fees/recommended. The rest of the parsing logic (getThreeTierFeeRates) remains unchanged. The commit message only mentions fee-rate precision, not security.
Changed components
src/main/java/com/sparrowwallet/sparrow/net/FeeRatesSource.javaMEMPOOL_SPACE fee-rate sourceInspect captured patch +1 / −1
diff --git a/src/main/java/com/sparrowwallet/sparrow/net/FeeRatesSource.java b/src/main/java/com/sparrowwallet/sparrow/net/FeeRatesSource.java
index 9a3b7ee..275bc86 100644
--- a/src/main/java/com/sparrowwallet/sparrow/net/FeeRatesSource.java
+++ b/src/main/java/com/sparrowwallet/sparrow/net/FeeRatesSource.java
@@ -31,7 +31,7 @@ public enum FeeRatesSource {
MEMPOOL_SPACE("mempool.space", true) {
@Override
public Map<Integer, Double> getBlockTargetFeeRates(Map<Integer, Double> defaultblockTargetFeeRates) {
- String url = getApiUrl() + "v1/fees/recommended";
+ String url = getApiUrl() + "v1/fees/precise";
return getThreeTierFeeRates(this, defaultblockTargetFeeRates, url);
}
Why this scored 21/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.