AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 45 Bitcoin

cut pasted amounts to the unit precision in the send tab and send to many, and stop the csv import skipping fractional sats and exponent amounts

Public commit record

What the developer wrote

Authored by Craig Raw

50/100 · Thin
cut pasted amounts to the unit precision in the send tab and send to many, and stop the csv import skipping fractional sats and exponent amounts
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
The short version

What changed, and why it matters

This commit fixes how Sparrow Wallet handles pasted or imported Bitcoin amounts. Previously, very small or oddly formatted amounts (like scientific notation '1e-8' or fractional satoshis) could be misread or silently skipped during CSV imports. The change now cuts pasted amounts to the correct precision and parses CSV amounts more carefully, preventing accidental wrong payment amounts.

Recommended action

Review the new UnitFormatDoubleConverter for edge cases around zero, negative, and maximum satoshi values. Verify that truncation behavior is consistently applied and does not introduce off-by-one-satoshi errors. Test CSV imports with scientific notation, fractional sats, locale-specific separators, and header rows.

Security signals we found

01

Amount parsing inconsistency between UI paste and CSV import

02

Silent swallowing of NumberFormatException could skip payment rows

03

Use of Double.parseDouble for monetary amounts

04

Potential truncation vs rounding behavior change in amount handling

05

BigDecimal introduced to improve precision handling

Risk score

Why this scored 45/100

Our methodology →
Potential impact 12/30
Exploitability 8/25
Stealth signal 9/15
Affected reach 7/15
Confidence 6/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.