CommitWatch RSS
EP
← All projectsElements Project

libwally-core

Cross-platform wallet primitives for keys, addresses, transactions, PSBT, and Elements.

BitcoinCryptographic librariesSoftware walletsNormal
Source repository ↗
Repository coverage

96 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

15security candidates27second-pass queue9AI analyses
15commits · 30 days
22commits · 60 days
74commits · 180 days
96commits · 365 days
Backfill bands
Aug 5 → Feb 622 seen3 candidatesComplete
Feb 6 → Jun 652 seen3 candidatesComplete
Jun 6 → Jul 67 seen0 candidatesComplete
Jul 6 → Aug 514 seen1 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

61/100 average clarity
11Strong · 80–100
42Adequate · 60–79
33Thin · 40–59
10Opaque · 0–39
1security candidate with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Jon Griffiths81137059
Ondřej Češka111050
Erick Cestari1110100
dependabot[bot]500093
odudex200062
Daniel Newton200055
pythcoiner100055
Greg Sanders100068
Leonardo Comandini100060
longhutianjie100072
Analysis record

Published AI watches

Last scanned 44 minutes ago

Informational 15 AI analysisMessage 73 · Adequate
EP Elements Projectlibwally-core BitcoinCryptographic librariesSoftware wallets

crypto: add ec_public_key_compress to produce a compressed pubkey

This commit adds a new public-key compression function to a cryptographic library and updates the existing decompression function so both can accept already-compressed or already-uncompressed keys as input. It also adds tests and language …

03351cc9by Jon Griffiths+92−1610 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 62 AI analysisMessage 85 · Strong
EP Elements Projectlibwally-core BitcoinCryptographic librariesSoftware wallets

sign: disallow overlong der encodings and zero r or s values

This commit tightens signature validation in a cryptographic library. It now rejects malformed DER-encoded signatures that are longer than allowed, or where one of the signature numbers (R or S) is zero. Previously, the underlying secp256k…

Cryptographic input validation hardeningRejection of overlong DER-encoded ECDSA signaturesRejection of zero R or S signature components
e7894ee6by Jon Griffiths+6−11 file
Vendor flagged security relevance
Open full analysis →Source commit ↗
Low 27 AI analysisMessage 78 · Adequate
EP Elements Projectlibwally-core BitcoinCryptographic librariesSoftware wallets

descriptor: support elements confidential wallet policies

This commit adds support in libwally-core for a new Elements/Liquid confidential-wallet policy format. It lets wallet policies include a special '@B' blinding key placeholder, kept separate from ordinary derivation keys. The change is a fe…

Descriptor/miniscript parsing code modifiedCryptographic key validation logic changedNew input validation rules added for '@B' blinding key
6bbe9eebby Jon Griffiths+90−331 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 50 · Thin
EP Elements Projectlibwally-core BitcoinCryptographic librariesSoftware wallets

bip32: add some of the new bip32 checks to bip32_key_unserialize

This commit adds a safety check when loading BIP32 extended keys. Before, the code accepted any 33-byte public key bytes without verifying they form a valid public key. Now it calls a public-key validation function and rejects invalid keys…

New input-validation call (wally_ec_public_key_verify) added to deserialization pathRejection of invalid public-key bytes before key material is copied into output structAddition of BIP32 Test Vector 5 invalid-key test cases
2b74c8d7by Ondřej Češka+65−02 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 100 · Strong
EP Elements Projectlibwally-core BitcoinCryptographic librariesSoftware wallets

build: add fuzzing infrastructure for security testing

This commit only adds new build options and a test harness for fuzzing (automated security testing). It does not change any existing library code that handles PSBTs or other data, so it cannot by itself introduce a security vulnerability o…

c824172aby Erick Cestari+108−07 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Low 44 AI analysisMessage 45 · Thin
EP Elements Projectlibwally-core BitcoinCryptographic librariesSoftware wallets

psbt: handle allocation failures in set_global_tx

This commit fixes a memory-management bug in the library's Partially Signed Bitcoin Transaction (PSBT) handling. When the code failed to allocate memory for new transaction inputs or outputs, it could leave behind partially initialized dat…

Allocation-failure handling added (NULL checks before array initialization)Resource cleanup improved (element-level free before array free)Potential use of uninitialized/freed memory path removed in OOM case
e45f553dby Jon Griffiths+26−141 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 60 · Adequate
EP Elements Projectlibwally-core BitcoinCryptographic librariesSoftware wallets

psbt: fix check for too many witnesses

This commit fixes a parsing bug in how the library reads Bitcoin-style witness data from a transaction or PSBT. Before the fix, a malformed input could claim there were millions of witnesses while only providing a few bytes. The code would…

Out-of-bounds read / buffer over-read in a core deserialization routinePotential memory allocation failure or integer overflow from attacker-controlled witness countNew negative test case added for malformed PSBT with excessive witness count
a3fd0aa8by Jon Griffiths+11−03 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Moderate 61 AI analysisMessage 60 · Adequate
EP Elements Projectlibwally-core BitcoinCryptographic librariesSoftware wallets

psbt: fix check for short buffers

This commit fixes a bug in how the library reads compact size numbers from PSBT (Partially Signed Bitcoin Transaction) data. Before the fix, the code could read past the end of a short input buffer when checking how many bytes a variable-l…

Out-of-bounds read in variable-length integer parsingShort/truncated input buffer not validated before length inspectionNew negative test case added for short PSBT bytes
a1de7372by Jon Griffiths+9−13 files
No security note in commit
Open full analysis →Source commit ↗
Low 35 AI analysisMessage 60 · Adequate
EP Elements Projectlibwally-core BitcoinCryptographic librariesSoftware wallets

psbt: use control block verification call internally

This commit replaces a simple length check on Taproot control blocks with a dedicated verification function. The change is likely a hardening or correctness improvement rather than a clear-cut security fix. The old check only ensured the c…

Replaced length-only validation with a dedicated BIP341 control-block verification routineRemoved duplicated inline length check in favor of a centralized validation callParsing and serialization paths for Taproot leaf scripts now share the same validation logic
944f2660by Jon Griffiths+3−91 file
No security note in commit
Open full analysis →Source commit ↗
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

AI review queuedbuild(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 in /src/wasm_packageby dependabot[bot] · d3f6adf0 · Aug 5, 2026 · 1 fileMessage 93 · StrongTriage 0Details
Commit message · dependabot[bot]

build(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 in /src/wasm_package

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.4 to 3.1.5.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5)

---
updated-dependencies:
- dependency-name: fast-uri
dependency-version: 3.1.5
dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

93/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
Security candidatecrypto: add ec_public_key_compress to produce a compressed pubkeyby Jon Griffiths · 03351cc9 · Jul 31, 2026 · 10 filesMessage 73 · AdequateInformational 15Details
Commit message · Jon Griffiths

crypto: add ec_public_key_compress to produce a compressed pubkey

Allow both compress and decompress to work (as a no-op) on already
compressed/decompressed pubkeys.

Co-authored-by: odudex <odudex@proton.me>

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive pathsigning or wallet path
AI analysis · Informational 15/100

This commit adds a new public-key compression function to a cryptographic library and updates the existing decompression function so both can accept already-compressed or already-uncompressed keys as input. It also adds tests and language bindings. There is no security vulnerability here; it is a normal feature addition with defensive input validation.

AI review queuedtests: add tests for parsing invalid der sigsby Jon Griffiths · 824e8a33 · Jul 31, 2026 · 1 fileMessage 55 · ThinTriage 12Details
Commit message · Jon Griffiths

tests: add tests for parsing invalid der sigs

55/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
Security candidatesign: disallow overlong der encodings and zero r or s valuesby Jon Griffiths · e7894ee6 · Jul 31, 2026 · 1 fileMessage 85 · StrongModerate 62Details
Commit message · Jon Griffiths

sign: disallow overlong der encodings and zero r or s values

libsecp will happily parse and return such signatures without error,
however they can never be valid (in the overlong case, because libsecp
internally sets R to zero). Reject them up-front when parsing rather
than failing when attempting to use them later.

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
Why it was queued
signing boundarysigning or wallet path
AI analysis · Moderate 62/100

This commit tightens signature validation in a cryptographic library. It now rejects malformed DER-encoded signatures that are longer than allowed, or where one of the signature numbers (R or S) is zero. Previously, the underlying secp256k1 library would accept these invalid forms silently, which could lead to later failures or unexpected behavior when the signatures are used in Bitcoin/Elements transactions.

AI review queuedbuild(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 in /src/wasm_packageby dependabot[bot] · c25fc5fd · Jul 25, 2026 · 1 fileMessage 93 · StrongTriage 0Details
Commit message · dependabot[bot]

build(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 in /src/wasm_package

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4)

---
updated-dependencies:
- dependency-name: fast-uri
dependency-version: 3.1.4
dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

93/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
automated dependency-update discountsecond-pass: broader security terminology
AI review queuedBump version to 1.5.6by Jon Griffiths · 0c41f38f · Jul 11, 2026 · 9 filesMessage 38 · OpaqueTriage 0Details
Commit message · Jon Griffiths

Bump version to 1.5.6

38/100 · OpaqueMessage clarity
✓ Subject identifies a change✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
Lower-priorityupdate CHANGES.md for release 1.5.6by Jon Griffiths · 9947fc4e · Jul 11, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

update CHANGES.md for release 1.5.6

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
Lower-prioritydescriptor: reject nested expressions with unconsumed trailing inputby odudex · f23a1c97 · Jul 11, 2026 · 2 filesMessage 73 · AdequateTriage 0Details
Commit message · odudex

descriptor: reject nested expressions with unconsumed trailing input

A nested expression was delimited only by its enclosing brackets and
commas, so trailing characters after it were silently ignored, e.g.
wsh(pk(KEY)xyz) parsed as wsh(pk(KEY)).

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Lower-prioritydescriptor: require type B for the top level miniscript in sh()/wsh()by odudex · 6f656241 · Jul 11, 2026 · 2 filesMessage 50 · ThinTriage 0Details
Commit message · odudex

descriptor: require type B for the top level miniscript in sh()/wsh()

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-priorityupdate CHANGES.md for release 1.5.5by Jon Griffiths · d0ac03ba · Jul 9, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

update CHANGES.md for release 1.5.5

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI review queuedBump version to 1.5.5by Jon Griffiths · 78499f00 · Jul 9, 2026 · 9 filesMessage 38 · OpaqueTriage 0Details
Commit message · Jon Griffiths

Bump version to 1.5.5

38/100 · OpaqueMessage clarity
✓ Subject identifies a change✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
Lower-priorityci: re-enable clear testsby Jon Griffiths · 1009497b · Jul 9, 2026 · 1 fileMessage 67 · AdequateTriage 0Details
Commit message · Jon Griffiths

ci: re-enable clear tests

67/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
Lower-prioritytests: add more test_clear testsby pythcoiner · 9d05ca17 · Jul 9, 2026 · 1 fileMessage 55 · ThinTriage 0Details
Commit message · pythcoiner

tests: add more test_clear tests

55/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
Security candidateinternal: avoid potential info leaks via sse/avx registersby Jon Griffiths · 91b3b6d6 · Jul 9, 2026 · 10 filesMessage 73 · AdequateTriage 15Details
Commit message · Jon Griffiths

internal: avoid potential info leaks via sse/avx registers

In particular when built as a shared library, calls through the PLT
spill these registers onto the stack.

Thanks to @pythcoiner <pythcoiner@proton.me> for identifying the
leak cause and suggesting a fix.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
Lower-priorityinternal: mark internal functions as hidden visibility when possibleby Jon Griffiths · 2d36c91d · Jul 9, 2026 · 5 filesMessage 73 · AdequateTriage 0Details
Commit message · Jon Griffiths

internal: mark internal functions as hidden visibility when possible

Even when building with -fvisibility=hidden, some internal functions
(those that aren't static and thus provably limited to a single
compilation unit) are not marked hidden. As a result, calls to them from
within the library are routed through the PLT. This can result in
register data containing secrets/partial secrets being spilled to the
stack.

Mark such internal functions as hidden so internal calls to them avoid
the PLT call mechanism.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Lower-prioritydescriptor: avoid iterating multisig nodes twiceby Jon Griffiths · 017d76eb · Jul 6, 2026 · 1 fileMessage 68 · AdequateTriage 0Details
Commit message · Jon Griffiths

descriptor: avoid iterating multisig nodes twice

node_get_child_count() iterates all keys which we then immediately do
again below. Count the children as we iterate checking the keys instead.

Co-authored-by: odudex <odudex@proton.me>

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI review queuedBump version to 1.5.4by Jon Griffiths · c5591834 · Jun 16, 2026 · 9 filesMessage 38 · OpaqueTriage 0Details
Commit message · Jon Griffiths

Bump version to 1.5.4

38/100 · OpaqueMessage clarity
✓ Subject identifies a change✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
Lower-prioritybuild: bump dso version for 1.5.4by Jon Griffiths · f5b4055b · Jun 16, 2026 · 1 fileMessage 57 · ThinTriage 0Details
Commit message · Jon Griffiths

build: bump dso version for 1.5.4

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Lower-priorityupdate CHANGES.md for release 1.5.4by Jon Griffiths · cea4227f · Jun 16, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

update CHANGES.md for release 1.5.4

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
Lower-priorityci: update ci imageby Jon Griffiths · a212c0d3 · Jun 16, 2026 · 1 fileMessage 40 · ThinTriage 0Details
Commit message · Jon Griffiths

ci: update ci image

40/100 · ThinMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope! No meaningful explanatory body
Lower-prioritydocker: update trixie base imageby Jon Griffiths · 112c0ff3 · Jun 16, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

docker: update trixie base image

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-priorityelements: align unblinding with the elements implby Jon Griffiths · d8153d1c · Jun 16, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

elements: align unblinding with the elements impl

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-priorityjava: only set source level to 17 if supported by javacby Jon Griffiths · 71fd4c4c · May 28, 2026 · 1 fileMessage 50 · ThinTriage 0Details
Commit message · Jon Griffiths

java: only set source level to 17 if supported by javac

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-priorityjs: update github build to ubuntu 24.04by Jon Griffiths · 4976dc48 · May 28, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

js: update github build to ubuntu 24.04

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
Lower-prioritybuild: add python 3.14 support, disable 3.15 while in betaby Jon Griffiths · 11c7da3e · May 28, 2026 · 1 fileMessage 62 · AdequateTriage 0Details
Commit message · Jon Griffiths

build: add python 3.14 support, disable 3.15 while in beta

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount