AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 18 Bitcoin

Delete psbt module

Public commit record

What the developer wrote

Authored by Tobin C. Harding

81/100 · Strong
Delete psbt module

In #6055 we deprecated the `psbt` module on the `0.32.x` branch. Now
we can delete it from master.

### Context

Development of the PSBT has moved to a separate crate. Hosted on the
new Forgejo instance at:

https://git.rust-bitcoin.org/rust-bitcoin/rust-psbt

Crate name is `psbt-v2` because it has initial support for PSBTv2. The
crate also includes all code from the `0.32.x` branch (as well as
miniscript code). In other words the crate is a drop in replacement
for the `Psbt` type and its functionality.

During release of `psbt-v2 v0.3.0` we attempted to ensure feature
parity with `0.32.x` since the actual migration was done a while back.

The road map for dev of `psbt-v2` is loosely:

- Improve PSBTv2 stuff
- Continue work on supporting Silent Payments
- Use crate as a test bed for the process of upgrade of `bitcoin 0.32.x`


Exact strategy of the last point is being worked on. We are
investigating creating a bunch of step-by-step releases to help the
process. To prove (and develop) the process we plan on using:

- miniscript
- psbt-v2
- corepc
✓ Subject identifies a change✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
The short version

What changed, and why it matters

This commit removes the entire PSBT (Partially Signed Bitcoin Transaction) module from the rust-bitcoin library on the master branch. It is a planned code cleanup, not a security fix. The PSBT functionality has been moved to a separate crate called psbt-v2, and the old module was already deprecated in a previous release. Users who relied on the built-in PSBT support will need to migrate to the new crate when upgrading.

Recommended action

No immediate security action is required. Downstream maintainers should plan migration to the `psbt-v2` crate for PSBT functionality and review the breaking changes before upgrading rust-bitcoin on master. Monitor the project's migration guide and release notes for step-by-step upgrade instructions.

Security signals we found

01

Large-scale deletion of a previously deprecated public API module

02

Removal of PSBT serialization/deserialization, signing, and finalization code from the main crate

03

No changes to cryptographic primitives, consensus logic, or transaction validation

04

No vendor mention of a security bug, CVE, or vulnerability report

Risk score

Why this scored 18/100

Our methodology →
Potential impact 0/30
Exploitability 0/25
Stealth signal 0/15
Affected reach 5/15
Confidence 9/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.