What changed, and why it matters
This commit simply swaps the web and Tor addresses used by Sparrow Wallet to broadcast Bitcoin transactions through the Bisq mempool service. It changes one line in a list of broadcast sources, replacing 'mempool.bisq.services' with 'markets.bisq.network' and updating the corresponding onion address. There is no code logic change and no indication of a security vulnerability being fixed.
No security action required. Users may verify the new Bisq URLs are legitimate if they use this broadcast source.
Security signals we found
No security-relevant code change
Third-party service URL migration only
No input validation, parsing, or secret-handling changes
Evidence from the diff
The patch updates the MEMPOOL_BISQ_SERVICES entry in BroadcastSource.java. The display name, clearnet HTTPS URL, and Tor onion URL for the Bisq broadcast source are all changed. The broadcastTransaction() implementation remains identical, still POSTing serialized transaction hex to the same relative endpoint. No cryptographic, network-validation, or authentication code is modified.
Changed components
src/main/java/com/sparrowwallet/sparrow/net/BroadcastSource.javaInspect captured patch +1 / −1
diff --git a/src/main/java/com/sparrowwallet/sparrow/net/BroadcastSource.java b/src/main/java/com/sparrowwallet/sparrow/net/BroadcastSource.java
index a5b586d..773909c 100644
--- a/src/main/java/com/sparrowwallet/sparrow/net/BroadcastSource.java
+++ b/src/main/java/com/sparrowwallet/sparrow/net/BroadcastSource.java
@@ -87,7 +87,7 @@ public enum BroadcastSource {
}
}
},
- MEMPOOL_BISQ_SERVICES("mempool.bisq.services", "https://mempool.bisq.services", "http://mempoolcutehjtynu4k4rd746acmssvj2vz4jbz4setb72clbpx2dfqd.onion") {
+ MEMPOOL_BISQ_SERVICES("markets.bisq.network", "https://markets.bisq.network", "http://runbtcxzz4v2haszypwbrn2baqdo7tlwt6dw7g27cwwaootd4gktwayd.onion/") {
public Sha256Hash broadcastTransaction(Transaction transaction) throws BroadcastException {
String data = Utils.bytesToHex(transaction.bitcoinSerialize());
return postTransactionData(data);
Why this scored 18/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.