Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.
This commit is a documentation-only changelog update for the Trezor firmware releases core 2.11.2 and bootloader 2.1.17. It does not change any code. The changelog lists several previously fixed security issues, including bugs in Solana ac…
Changelog explicitly categorizes PRs #246, #248, #249 as SecurityEIP-712 domain caching may relate to transaction-signing spoofing or replaySolana ALT recipient/account-type parsing fixes suggest possible incorrect recipient display or funds misdirection
This commit updates a QA/testing bootloader binary and its recorded cryptographic hash for the T3W1 hardware model. It is a routine development chore with no visible security fix or vulnerability.
This commit replaces the signed bootloader binary for the Trezor T3W1 hardware wallet model and updates the matching cryptographic hash list. The change is a routine version bump from bootloader version 2.1.16.0 to 2.1.17.0. The commit mes…
Opaque binary update of a security-critical bootloader componentVersion bump from 2.1.16.0 to 2.1.17.0 without stated security relevanceNo source diff or changelog visible in the commit
This commit is a routine housekeeping change that only updates version numbers in several files. It does not change any program logic, fix any bug, or alter any security behavior. There is nothing here that could be exploited or that affec…
This commit fixes an off-by-one-style bounds check in the Ethereum clear-signing code on Trezor hardware wallets. The old check only verified that the starting position was inside the data, but did not verify that the code was about to rea…
This commit changes how Trezor displays Ethereum token-approval amounts that exceed a safety threshold. Previously, the code returned 'None' for such large amounts, and the user interface fell back to a generic 'Unlimited amount' warning. …
UI-only change in Ethereum token-approval flowExplicit sentinel replaces implicit None for above-threshold amountsNo change to signing, parsing, or access-control logic
This commit changes how Trezor handles Ethereum transactions with large amounts of embedded data. Previously, the device always tried to 'clear sign' (show human-readable details on screen) for every transaction. Now, if the transaction da…
Behavioral guard added to skip parser on oversized calldataFallback to blind signing explicitly preservedComment indicates architectural limitation in clear-signing data fetching
This commit adds human-readable labels for certain cryptocurrency swap transactions on Trezor hardware wallets. It does not change how transactions are validated or signed; it only improves what the user sees on the device screen. There is…
Adds display-only metadata for DeFi swap contractsNo changes to cryptographic or authorization codePotential risk if field paths or token addresses are mislabeled, leading to user confusion
This commit is a code cleanup that moves the on-screen confirmation flow for Ethereum 'clear signing' into the device's UI layout modules. It also adds a final summary screen showing the maximum transaction fee. There is no direct evidence…
UI flow refactor for transaction confirmationNew maximum fee summary screen added to clear-signing pathRecipient display fallback changed from None to raw msg.to for unknown addresses
This commit fixes how Trezor displays details for certain 1inch cryptocurrency swap transactions. Previously, the device tried to interpret a parameter called 'pools' as a list of plain numbers, but it actually contains packed binary data.…
Transaction display misclassification: a bytes field was being parsed as uint256 array, potentially showing misleading information to the userClear-signing registry mismatch: the EIP-7730 registry description did not match actual 1inch calldata encodingUser confirmation UI change: previously only the last pool was shown with a unit formatter; now the full raw pools bytes are shown as hex
This commit only adds new test cases for Ethereum transaction signing on Trezor hardware wallets. It includes sample swap transactions from services like 1inch, LiFi, and Uniswap, plus a large-data test case. There is no change to the actu…
This commit is a code refactor that reorganizes how Trezor handles Ethereum transaction display logic. It splits existing code into new modules for 'clear signing' and staking, and changes how token amounts and addresses are formatted befo…
Refactor of transaction confirmation UI logic for Ethereum token transfers and approvalsNew unknown-token confirmation path added for transfer transactionsAmount formatting and address parsing logic moved between modules
This commit only adds two new user-facing text strings ('Confirm contract' and 'Intent') to the Trezor firmware's translation system. It does not change any code logic, security checks, or transaction handling. There is no indication this …
This commit removes an old, duplicated screen called flow_confirm_output and makes the confirm_output function always use the newer confirm_value-based flow. There is no security bug being fixed here; it is a cleanup that unifies how trans…
This commit removes an unused user-interface flow called ConfirmOutputWithSummary from the Trezor firmware. It is a code cleanup: no security vulnerability is fixed or introduced, and no behavior that users currently rely on is changed.
This commit adds a new option to Trezor's on-screen confirmation dialogs that lets developers hide the cancel/cross button on the new 'Eckhart' device layout. It does not remove cancel from existing layouts, and the default behavior keeps …
UI flow change: ability to suppress explicit cancel button in a confirmation dialogDefault remains permissive (cancel=True), limiting blast radiusOnly one production call site currently uses the new flag
This commit is a large but purely cosmetic refactor of on-screen text labels across Trezor firmware. It removes trailing colons from many prompts (e.g., changing 'New fee rate:' to 'New fee rate') and adjusts capitalization for consistency…
This commit adds support for a new Ethereum transaction type called EIP-7702 (smart accounts / account abstraction) to Trezor firmware. It is a feature addition, not a security fix. The change includes new user-facing confirmation text, te…
New feature implementation (EIP-7702 support)Gated behind safety_checks=false and an allow-listed contract addressAdds explicit user confirmation prompt for authorizing EIP-7702 contract
This commit is a routine user-interface feature addition. It lets certain 'property' display screens show an optional subtitle and gives callers a way to override the page title. There is no security-relevant change in the diff.
This commit removes a dedicated two-page 'confirm output with amount' screen and replaces it with two separate confirmation prompts for the address and the amount. It is a user-interface refactor, not a fix for a security vulnerability. Th…
UI flow refactor with no changelog entryRemoval of dedicated amount-confirmation page in favor of separate confirm_value callsTest expectations updated to include extra ConfirmOutput button requests