Accepted findings
207
58 unique; 149 shared
adversarial
gpt-6-astra
Completion
100.0%
128 executed runs; skipped excluded
Request records
1,361
Includes reruns and retries
Input tokens
90,243,980 (partial)
Candidate findings
Candidate rows can merge into one accepted finding. Publish is the verifier decision; accepted attribution is recorded separately.
| PR | Finding | Verifier decision | Attribution | Report |
|---|---|---|---|---|
| #34778 | `-loglevelalways` omits the category on Info, Warning, and Error linessrc/logging.cpp:359adversarial:1 | publish | Accepted, shared | report |
| #34778 | Disabled Debug and Trace calls acquire the logger mutexsrc/logging.cpp:625adversarial:2 | publish | Accepted, shared | report |
| #29409 | Gate external Chain access on chainstate initializationsrc/ipc/capnp/init.capnp:27adversarial:1 | unresolved | Not accepted | report |
| #29409 | Contain notification callback failures before they escape the schedulersrc/ipc/capnp/chain.capnp:92adversarial:2 | unresolved | Not accepted | report |
| #29409 | `handleRpc` accesses request and response state outside cancellation protectionsrc/ipc/capnp/chain.cpp:176adversarial:3 | publish | Accepted, sole | report |
| #29409 | Land the argument-hardening prerequisite before exposing getBlockHashsrc/ipc/capnp/chain.capnp:60adversarial:4 | unresolved | Not accepted | report |
| #29409 | Failed `SpawnProcess` setup can leak socket descriptorssrc/ipc/libmultiprocess/src/mp/util.cpp:257adversarial:5 | publish | Accepted, sole | report |
| #36167 | RPC argument parsing changes the accepted `maxtries` and `psbt_version` rangessrc/rpc/mining.cpp:317adversarial:1 | publish | Accepted, shared | report |
| #36167 | Unnamed same-typed callback arguments obscure their meaningsrc/kernel/bitcoinkernel_wrapper.h:1124adversarial:2 | publish | Accepted, shared | report |
| #36641 | Evicted MuSig2 sessions are not distinguishable from rounds awaiting cosignerssrc/musig.cpp:134adversarial:1 | publish | Accepted, shared | report |
| #36641 | The bounded-store test does not verify the cap or FIFO removal ordersrc/wallet/test/scriptpubkeyman_tests.cpp:79adversarial:2 | publish | Accepted, shared | report |
| #29491 | A worker can be counted twice before all batches finish verificationsrc/checkqueue.h:138adversarial:1 | publish | Accepted, shared | report |
| #29491 | A stale script-check error can mark the next valid block invalidsrc/checkqueue.h:209adversarial:2 | publish | Accepted, shared | report |
| #29491 | A public batch seed can let cancelling invalid signatures pass verificationsrc/secp256k1/src/modules/schnorrsig/batch_add_impl.h:133adversarial:3 | publish | Accepted, shared | report |
| #29491 | The reject reason for a failed Schnorr batch varies with `-par`src/validation.cpp:2713adversarial:4 | publish | Accepted, shared | report |
| #29491 | The randomized sign-and-batch-verify test is not registeredsrc/secp256k1/src/modules/schnorrsig/batch_add_tests_impl.h:240adversarial:5 | publish | Accepted, shared | report |
| #29491 | The refactored ecmult tests no longer pass a NULL generator scalarsrc/secp256k1/src/tests.c:5328adversarial:6 | publish | Accepted, sole | report |
| #35728 | Tests do not cover the legacy-entry deserialization errorsrc/index/txindex.cpp:238adversarial:1 | publish | Accepted, sole | report |
| #36696 | ToVector's comment suggests a replacement that can transfer the caller's vectorsrc/util/vector.h:23adversarial:1 | publish | Accepted, shared | report |
| #36697 | An odd-Y HD root used as an x-only key makes export report inconsistent wallet datasrc/wallet/scriptpubkeyman.cpp:1438adversarial:1 | publish | Accepted, sole | report |
| #36697 | Reloaded odd-Y Taproot WIF keys are not found for non-Taproot addressessrc/wallet/scriptpubkeyman.cpp:1384adversarial:2 | publish | Accepted, sole | report |
| #36697 | Taproot discovery rescans key maps and repeats private expansion under `cs_wallet`src/wallet/export.cpp:198adversarial:3 | publish | Accepted, sole | report |
| #35932 | Destroy the disconnected connections so the event loop can exitsrc/ipc/capnp/protocol.cpp:145adversarial:1 | undisposed | Not accepted | report |
| #35932 | Include already-disconnected calls in the shutdown drainsrc/ipc/capnp/protocol.cpp:142adversarial:2 | undisposed | Not accepted | report |
| #35354 | Snapshot sync can park filter requests until the peer times outsrc/net_processing.cpp:3579adversarial:1 | publish | Accepted, shared | report |
| #35354 | Snapshot sync can park filter requests until the peer times outsrc/net_processing.cpp:3579adversarial:2 | publish | Accepted, shared | report |
| #35354 | A failed assertion can leave the scheduler blocked and hang the test suitesrc/test/cfilter_race_tests.cpp:110adversarial:3 | publish | Accepted, shared | report |
| #10102 | IPC trace logging can record wallet passphrasessrc/ipc/capnp/chain.capnp:135adversarial:1 | publish | Accepted, sole | report |
| #10102 | CoinControl maximum depth is replaced by the minimum depth over IPCsrc/ipc/capnp/wallet.cpp:196adversarial:2 | publish | Accepted, shared | report |
| #10102 | Reading a WitnessUnknown destination throwssrc/ipc/capnp/wallet.cpp:137adversarial:3 | publish | Accepted, shared | report |
| #10102 | PayToAnchor destinations are not serializedsrc/ipc/capnp/wallet.cpp:113adversarial:4 | publish | Accepted, shared | report |
| #25573 | Static ELF FORTIFY check accepts binaries without checking Bitcoin Core's codecontrib/guix/security-check.py:130adversarial:1 | publish | Accepted, shared | report |
| #25573 | Linux runtime requirements omit bitcoin-gui and conflict with INSTALL.mddoc/release-notes-25573.md:4adversarial:2 | publish | Accepted, shared | report |
| #29418 | Fragmented-ping test can race with the peer's automatic pongtest/functional/rpc_net.py:343adversarial:1 | publish | Accepted, sole | report |
| #29418 | Sent counts include messages that were not fully writtensrc/net.cpp:1640adversarial:2 | publish | Accepted, shared | report |
| #29418 | Partial-message assertion can run before the prefix arrivestest/functional/rpc_net.py:348adversarial:3 | publish | Accepted, sole | report |
| #29418 | Every call builds maps for all 3,626 cells and emits keys in unspecified ordersrc/rpc/net.cpp:696adversarial:4 | publish | Accepted, shared | report |
| #30437 | bitcoin-mine can shrink and append to the node's debug.logsrc/bitcoin-mine.cpp:101adversarial:1 | publish | Accepted, shared | report |
| #30437 | Final tip comparison dereferences an empty optionalsrc/bitcoin-mine.cpp:159adversarial:2 | publish | Accepted, shared | report |
| #30437 | Null IPC connection results make bitcoin-mine abortsrc/bitcoin-mine.cpp:119adversarial:3 | publish | Accepted, shared | report |
| #30437 | The functional test accepts a failed block submissiontest/functional/feature_mine.py:28adversarial:4 | publish | Accepted, shared | report |
| #30951 | Scheduled probes select clearnet addresses that the v2-only guard later skipssrc/net.cpp:450adversarial:1 | publish | Accepted, shared | report |
| #30951 | The new test does not exercise v1 retry suppression or the name-proxy branchtest/functional/p2p_v2_encrypted.py:144adversarial:2 | publish | Accepted, shared | report |
| #31507 | Windows presets can mismatch the target and vcpkg dependency architecturesCMakePresets.json:12adversarial:1 | publish | Accepted, shared | report |
| #31507 | Builtins archive selection follows the host processor rather than the compiler targetCMakeLists.txt:329adversarial:2 | publish | Accepted, shared | report |
| #31507 | The native Windows guide does not specify the clang-cl version requirementdoc/build-windows-native.md:32adversarial:3 | publish | Accepted, shared | report |
| #30988 | Wildcard listeners use the unspecified address as each inbound peer’s local addresssrc/common/sockman.cpp:514adversarial:1 | publish | Accepted, shared | report |
| #30988 | An I2P connection attempt without a proxy aborts in debug and fuzz buildssrc/common/sockman.cpp:157adversarial:2 | publish | Accepted, shared | report |
| #30988 | The `connman` fuzz target no longer exercises the socket I/O loopsrc/test/fuzz/connman.cpp:213adversarial:3 | publish | Accepted, shared | report |
| #36628 | `Assign()` seed and query-set rules lack regression testssrc/test/privbcast_plan_tests.cpp:17adversarial:1 | publish | Accepted, sole | report |
| #32387 | Windows spawn pipe can be claimed by another local usersrc/ipc/libmultiprocess/src/mp/util.cpp:419adversarial:1 | publish | Accepted, shared | report |
| #32387 | Failed Windows spawns leak sockets and process handlessrc/ipc/libmultiprocess/src/mp/util.cpp:447adversarial:2 | publish | Accepted, shared | report |
| #32387 | MinGW retains ThreadContext for every completed IPC workersrc/ipc/libmultiprocess/src/mp/proxy.cpp:67adversarial:3 | publish | Accepted, shared | report |
| #32468 | A commitment-shaped payout script can leave the block with an invalid witness commitmentsrc/rpc/mining.cpp:507adversarial:1 | publish | Accepted, shared | report |
| #32468 | Extra coinbase outputs are not included in the mempool template's weight and sigops reservationssrc/rpc/mining.cpp:457adversarial:2 | publish | Accepted, shared | report |
| #32468 | The OpenRPC schema does not describe the supported `output` formssrc/rpc/mining.cpp:339adversarial:3 | publish | Accepted, shared | report |
| #32468 | Multi-recipient tests reuse the same address for every outputtest/functional/rpc_generate.py:54adversarial:4 | publish | Accepted, sole | report |
| #32468 | Help omits that explicit transaction lists forfeit transaction feessrc/rpc/mining.cpp:337adversarial:5 | publish | Accepted, shared | report |
| #33117 | Include service-flag updates in the shared snapshot-loading operationsrc/node/interfaces.cpp:137adversarial:1 | undisposed | Not accepted | report |
| #33117 | Represent snapshot verification separately from deserialization progresssrc/validation.cpp:5848adversarial:2 | undisposed | Not accepted | report |
| #33324 | A resumed migration does not commit its staged keysrc/node/blockstorage.cpp:240adversarial:1 | publish | Accepted, sole | report |
| #33324 | Six-digit block-file numbers are skipped during migrationsrc/node/blockstorage.cpp:191adversarial:2 | publish | Accepted, sole | report |
| #33324 | Migration errors omit the underlying filesystem failuresrc/node/blockstorage.cpp:265adversarial:3 | publish | Accepted, shared | report |
| #35307 | Preserve undo durability for base blocks stored by the previous versionsrc/node/blockstorage.cpp:801adversarial:1 | undisposed | Not accepted | report |
| #35307 | Flush the normal-range writes made during a post-validation reorgsrc/node/blockstorage.cpp:808adversarial:2 | undisposed | Not accepted | report |
| #35307 | Exercise the already-stored base without restarting as welltest/functional/feature_assumeutxo.py:242adversarial:3 | undisposed | Not accepted | report |
| #32575 | TestBlockValidity lacks regression coverage for deferred script-cache writessrc/validation.cpp:2725adversarial:1 | publish | Accepted, shared | report |
| #36697 | Reloaded odd-Y Taproot WIF keys are missed for non-Taproot addressessrc/wallet/scriptpubkeyman.cpp:1384adversarial:1 | publish | Accepted, sole | report |
| #36697 | Taproot discovery repeats key scans and private descriptor expansion under `cs_wallet`src/wallet/export.cpp:198adversarial:2 | publish | Accepted, shared | report |
| #33922 | Template destruction can access BlockTemplateManager after shutdown resets itsrc/node/interfaces.cpp:894adversarial:1 | publish | Accepted, shared | report |
| #33922 | Wtxid-keyed tracking merges separate allocations of the same transactionsrc/node/block_template_manager.h:46adversarial:2 | publish | Accepted, shared | report |
| #33922 | Memory estimate omits each non-mempool transaction's own allocationsrc/node/block_template_manager.cpp:105adversarial:3 | publish | Accepted, shared | report |
| #33922 | Template refcounting test relies on a crash unavailable in release buildstest/functional/interface_ipc_mining.py:328adversarial:4 | publish | Accepted, shared | report |
| #34038 | Runtime trace changes do not enable tracing on existing wallets or IPC loopssrc/rpc/node.cpp:297adversarial:1 | publish | Accepted, shared | report |
| #34038 | No-log-file contexts leave trace logging enabled in hot loopssrc/test/util/setup_common.cpp:167adversarial:2 | publish | Accepted, shared | report |
| #34038 | The `-trace` help misstates how `0` and `none` handle categoriessrc/init/common.cpp:33adversarial:3 | publish | Accepted, sole | report |
| #34038 | The release note incorrectly says wallet SQL is the only supported trace outputdoc/release-notes-34038.md:4adversarial:4 | publish | Accepted, shared | report |
| #36673 | Any matching issue can permanently suppress the certificate-expiry alert.github/workflows/code-signing-certificate.yml:52adversarial:1 | publish | Accepted, shared | report |
| #36673 | An unrelated issue can permanently suppress the certificate expiry alert.github/workflows/code-signing-certificate.yml:52adversarial:1 | publish | Accepted, shared | report |
| #34405 | Partial-spend counting adds overhead when the retry cannot use itsrc/wallet/spend.cpp:1255adversarial:1 | publish | Accepted, shared | report |
| #34534 | Startup pruning ignores `-prunelockheight`src/init.cpp:2132adversarial:1 | publish | Accepted, shared | report |
| #34534 | Validate the startup height before narrowing it to intsrc/init.cpp:2133adversarial:2 | drop | Not accepted | report |
| #34534 | A reorg lowers a future-height prune lock below its requested heightsrc/rpc/blockchain.cpp:974adversarial:3 | publish | Accepted, sole | report |
| #34534 | Listed prune-lock IDs do not round-trip through `setprunelock`src/rpc/blockchain.cpp:951adversarial:4 | publish | Accepted, sole | report |
| #34534 | Clean up manual prune locks between fuzz inputssrc/test/fuzz/rpc.cpp:179adversarial:5 | drop | Not accepted | report |
| #34603 | Wallet-path validation rejects some Windows reparse-point data filessrc/wallet/wallet.cpp:2974adversarial:1 | publish | Accepted, shared | report |
| #34603 | Windows attribute lookup failures lose the underlying OS errorsrc/util/fs_helpers.cpp:352adversarial:2 | publish | Accepted, shared | report |
| #34775 | Concurrent log writes are not guaranteed to preserve whole linessrc/bitcoin-chainstate.cpp:57adversarial:1 | publish | Accepted, shared | report |
| #29491 | A worker can be counted twice before every batch is verifiedsrc/checkqueue.h:138adversarial:1 | publish | Accepted, shared | report |
| #29491 | A stale script-check failure can make the next valid block permanently invalidsrc/checkqueue.h:209adversarial:2 | publish | Accepted, shared | report |
| #29491 | A public batch seed can let invalid Schnorr signatures cancelsrc/secp256k1/src/modules/schnorrsig/batch_add_impl.h:133adversarial:3 | publish | Accepted, shared | report |
| #29491 | Batch tweak checks can accept a parity value outside 0 or 1src/secp256k1/src/modules/extrakeys/batch_add_impl.h:115adversarial:4 | publish | Accepted, sole | report |
| #29491 | The randomized sign-and-batch-verify test is not registeredsrc/secp256k1/src/modules/schnorrsig/batch_add_tests_impl.h:240adversarial:5 | publish | Accepted, shared | report |
| #29491 | Schnorr batch failures have different reject reasons depending on `-par`src/validation.cpp:2654adversarial:6 | publish | Accepted, shared | report |
| #29491 | The refactored ecmult tests no longer pass a NULL generator scalarsrc/secp256k1/src/tests.c:5251adversarial:7 | publish | Accepted, sole | report |
| #29491 | The batch example reports success after randomness generation failssrc/secp256k1/examples/batch.c:37adversarial:8 | publish | Accepted, sole | report |
| #36572 | `loopRef()` can dereference a disengaged event-loop queuesrc/ipc/capnp/protocol.cpp:184adversarial:1 | publish | Accepted, shared | report |
| #36673 | Any user's matching issue can permanently suppress the expiry alert.github/workflows/code-signing-certificate.yml:48adversarial:1 | publish | Accepted, shared | report |
| #36673 | Exercise the alert and deduplication branches before the warning window.github/workflows/code-signing-certificate.yml:41adversarial:2 | drop | Not accepted | report |
| #36696 | ToVector moves from elements of temporary views and transfers nested bufferssrc/util/vector.h:31adversarial:1 | publish | Accepted, shared | report |
| #36696 | The range constructor has no direct tests for hashes, witnesses, or copy and move behaviorsrc/primitives/transaction.h:318adversarial:2 | publish | Accepted, shared | report |
| #35858 | Prerequisites omit a Tor setup route, the `-connect` conflict, and what reachability meansdoc/privacy.md:25adversarial:1 | publish | Accepted, shared | report |
| #36677 | Cover exclusive creation and append semantics in the new fopen testssrc/test/fs_tests.cpp:153adversarial:1 | undisposed | Not accepted | report |
| #35027 | Broadcast and multicast outbound bind addresses do not pin the source addresssrc/init.cpp:2214adversarial:1 | publish | Accepted, sole | report |
| #35071 | Resume checkpoint can be saved without the block index it lets the next run skipsrc/node/blockstorage.cpp:1349adversarial:1 | publish | Accepted, shared | report |
| #35071 | Resuming past blk00000.dat with -reindex-chainstate skips genesis activationsrc/node/blockstorage.cpp:1327adversarial:2 | publish | Accepted, sole | report |
| #35071 | Interrupted-reindex test depends on the stop arriving before the last file is scannedtest/functional/feature_reindex.py:128adversarial:3 | publish | Accepted, shared | report |
| #35071 | Resume test never restores a non-empty orphan maptest/functional/feature_reindex.py:106adversarial:4 | publish | Accepted, shared | report |
| #36521 | Witness enumeration through the kernel API becomes quadraticsrc/kernel/bitcoinkernel.cpp:892adversarial:1 | publish | Accepted, shared | report |
| #36521 | Script verification copies the witness before determining whether it is neededsrc/script/interpreter.cpp:1933adversarial:2 | publish | Accepted, shared | report |
| #36521 | Deserialization benchmarks omit the weight-budgeted P2P pathsrc/bench/block_deserialize.cpp:111adversarial:3 | publish | Accepted, sole | report |
| #36122 | PSBT completion accepts CISA aggregate witnesses without verifying themsrc/psbt.cpp:938adversarial:1 | publish | Accepted, shared | report |
| #36122 | Fullagg signing uses unresolved group sighash valuessrc/psbt.cpp:765adversarial:2 | publish | Accepted, sole | report |
| #36122 | `descriptorprocesspsbt` cannot retain fullagg secret noncessrc/rpc/rawtransaction.cpp:2157adversarial:3 | publish | Accepted, shared | report |
| #36477 | Resolved transactions overstate remaining send attemptssrc/private_broadcast.cpp:195adversarial:1 | publish | Accepted, shared | report |
| #36477 | Eviction tests do not verify oldest-first orderingsrc/test/fuzz/private_broadcast.cpp:140adversarial:2 | publish | Accepted, shared | report |
| #36607 | The guard does not suppress announcements of same-txid witness variantssrc/private_broadcast.cpp:89adversarial:1 | publish | Accepted, shared | report |
| #36607 | A local resubmission can stop retries without announcing the transactionsrc/net_processing.cpp:2491adversarial:2 | publish | Accepted, shared | report |
| #36607 | The fuzz model does not verify which finished entry is evictedsrc/test/fuzz/private_broadcast.cpp:140adversarial:3 | publish | Accepted, sole | report |
| #35994 | BuildSpendingTransaction drops the supplied script witnesssrc/test/util/transaction_utils.cpp:33adversarial:1 | publish | Accepted, shared | report |
| #35994 | Compound assignments are rewritten as plain assignmentscontrib/devtools/bitcoin-tidy/combine-assignments.cpp:72adversarial:2 | publish | Accepted, shared | report |
| #35994 | The fix-it can change side effects, dependencies, and repeated assignmentscontrib/devtools/bitcoin-tidy/combine-assignments.cpp:169adversarial:3 | publish | Accepted, shared | report |
| #35994 | The fix-it can change side effects, dependencies, and repeated assignmentscontrib/devtools/bitcoin-tidy/combine-assignments.cpp:169adversarial:4 | publish | Accepted, shared | report |
| #35994 | The fix-it can change side effects, dependencies, and repeated assignmentscontrib/devtools/bitcoin-tidy/combine-assignments.cpp:169adversarial:5 | publish | Accepted, shared | report |
| #35994 | The fix-it deletes comments between combined statementscontrib/devtools/bitcoin-tidy/combine-assignments.cpp:174adversarial:6 | publish | Accepted, shared | report |
| #34400 | Revalidate queued blocks before applying their transactionssrc/wallet/scan.cpp:669adversarial:1 | drop | Not accepted | report |
| #34400 | Parallel rescans can miss payments to scripts added during a no-match runsrc/wallet/scan.cpp:488adversarial:2 | publish | Accepted, sole | report |
| #34400 | Rescan cancellation waits for the current batch to finishsrc/wallet/scan.cpp:663adversarial:3 | publish | Accepted, shared | report |
| #34400 | A failed filter lookup during verdict patching preserves a no-match resultsrc/wallet/scan.cpp:331adversarial:4 | publish | Accepted, shared | report |
| #36696 | The range constructor's ownership behavior is undocumented and untestedsrc/primitives/transaction.h:318adversarial:1 | publish | Accepted, shared | report |
| #35286 | Clarify that successful preflight does not predict survival of mempool trimmingsrc/validation.cpp:1755adversarial:1 | unresolved | Not accepted | report |
| #35558 | The kernel and application queues are sampled at different timessrc/net.cpp:4264adversarial:1 | publish | Accepted, sole | report |
| #35558 | The TCP window check measures the local proxy connection, not the peer pathsrc/net.cpp:4251adversarial:2 | publish | Accepted, shared | report |
| #35558 | The optimistic reconstruction path drops prefill candidatessrc/net_processing.cpp:3882adversarial:3 | publish | Accepted, shared | report |
| #35558 | Logging-only prefill bookkeeping runs for every reconstructionsrc/blockencodings.cpp:105adversarial:4 | publish | Accepted, sole | report |
| #36629 | Recover index rows written beyond the committed locatorsrc/index/txoscriptindex.cpp:88adversarial:1 | unresolved | Not accepted | report |
| #36629 | An asof query can repeatedly deserialize a later spendersrc/rpc/blockchain.cpp:4097adversarial:2 | publish | Accepted, sole | report |
| #36628 | `Assign()` has no direct regression coveragesrc/test/privbcast_plan_tests.cpp:17adversarial:1 | publish | Accepted, sole | report |
| #36434 | `bitcoin-cli` rejects unspecified IP addresses before connectingsrc/netbase.cpp:834adversarial:1 | publish | Accepted, sole | report |
| #36434 | Startup replaces an existing live Unix RPC socketsrc/netbase.cpp:801adversarial:2 | publish | Accepted, shared | report |
| #36434 | `reset_conn()` drops the configured socket timeouttest/functional/interface_http.py:48adversarial:3 | publish | Accepted, shared | report |
| #35728 | The test can rename a block file before txindex finishes syncingtest/functional/rpc_rawtransaction.py:112adversarial:1 | publish | Accepted, sole | report |
| #35642 | The optimizer fuzz target does not check the attack-rate budgetsrc/test/fuzz/headerssync.cpp:171adversarial:1 | publish | Accepted, sole | report |
| #35511 | CAmount's compile-time restrictions lack regression testssrc/consensus/amount.h:34adversarial:1 | publish | Accepted, shared | report |
| #35387 | Unknown categories in a `categories` object dereference an empty optionalsrc/rpc/node.cpp:273adversarial:1 | publish | Accepted, shared | report |
| #35387 | An `info` category level prevents the default debug-log shrinksrc/init/common.cpp:98adversarial:2 | publish | Accepted, shared | report |
| #35387 | The test fixture's `-loglevel=trace` re-enables logging in no-log and benchmark setupssrc/init/common.cpp:89adversarial:3 | publish | Accepted, shared | report |
| #35387 | Runtime trace changes do not update existing SQLite and IPC trace sourcessrc/rpc/node.cpp:204adversarial:4 | publish | Accepted, shared | report |
| #35387 | The `libevent` examples for the `loglevel` RPC are rejecteddoc/release-notes-35387.md:25adversarial:5 | publish | Accepted, shared | report |
| #35377 | Reimporting an account-rooted descriptor can create a duplicate managersrc/wallet/imports.cpp:134adversarial:1 | publish | Accepted, sole | report |
| #35377 | Odd-parity x-only Taproot keys are not matched to wallet-held private keyssrc/wallet/imports.cpp:149adversarial:2 | publish | Accepted, shared | report |
| #35377 | Batch imports repeatedly copy and decrypt wallet root keyssrc/wallet/imports.cpp:124adversarial:3 | publish | Accepted, shared | report |
| #35355 | Concurrent logging RPC updates can leave a category traced but not debug-loggedsrc/logging.cpp:565adversarial:1 | publish | Accepted, shared | report |
| #35355 | Kernel log masks can be left stale when SetMinLevel races with connection create/destroysrc/kernel/bitcoinkernel.cpp:548adversarial:2 | publish | Accepted, shared | report |
| #35355 | Enabling walletdb tracing with the new RPC argument does not trace wallets that are already opensrc/rpc/node.cpp:282adversarial:3 | publish | Accepted, shared | report |
| #35355 | MakeNoLogFileContext leaves debug and trace logging on for all categoriessrc/test/util/setup_common.cpp:167adversarial:4 | publish | Accepted, shared | report |
| #35355 | Release note says wallet SQL is the only supported trace loggingdoc/release-notes-34038.md:4adversarial:5 | publish | Accepted, shared | report |
| #35355 | -trace help does not explain how it interacts with -debug and -nodebugsrc/init/common.cpp:33adversarial:6 | publish | Accepted, sole | report |
| #35307 | verifychain reports success after stopping at the snapshot basesrc/validation.cpp:4710adversarial:1 | publish | Accepted, sole | report |
| #35307 | The restart in the new test masks the missing-cursor failuretest/functional/feature_assumeutxo.py:242adversarial:2 | publish | Accepted, shared | report |
| #35302 | Fee-bump behavior for relearned silent-payments transactions is unclearsrc/wallet/feebumper.cpp:263adversarial:1 | publish | Accepted, shared | report |
| #35302 | Malleated silent-payments variants lose recipient metadatasrc/wallet/transaction.h:213adversarial:2 | publish | Accepted, sole | report |
| #35302 | Silent-payments fallback can bypass avoid-partial-spends groupingsrc/wallet/spend.cpp:1020adversarial:3 | publish | Accepted, shared | report |
| #34132 | Startup database corruption aborts before reindex recovery is offeredsrc/dbwrapper.cpp:358adversarial:1 | publish | Accepted, shared | report |
| #34132 | Exercise typed deserialization termination outside a noexcept coin lookupsrc/test/dbwrapper_tests.cpp:203adversarial:2 | drop | Not accepted | report |
| #32575 | No regression test covers cache writes from TestBlockValiditysrc/validation.cpp:2642adversarial:1 | publish | Accepted, shared | report |
| #35671 | A transaction collection can retain more data than a block can containsrc/node/tx_collection.cpp:97adversarial:1 | publish | Accepted, sole | report |
| #35728 | The test can rename a block file before txindex sync completestest/functional/rpc_rawtransaction.py:112adversarial:1 | publish | Accepted, sole | report |
| #35763 | The failure test does not verify that a failed write preserves the existing banlistsrc/test/banman_tests.cpp:69adversarial:1 | publish | Accepted, sole | report |
| #35788 | A negative spent-output amount aborts `bitcoin-util`src/bitcoin-util.cpp:378adversarial:1 | publish | Accepted, shared | report |
| #35788 | Tapscript budget omits the control block and annexsrc/bitcoin-util.cpp:414adversarial:2 | publish | Accepted, shared | report |
| #35788 | Even-length decimal script tokens are interpreted as raw hexsrc/bitcoin-util.cpp:312adversarial:3 | publish | Accepted, shared | report |
| #35793 | Future-leaf test vector reuses the Tapscript witnesssrc/test/bip54_tests.cpp:1060adversarial:1 | publish | Accepted, sole | report |
| #35793 | The Taproot annex vector does not contain an annexsrc/test/bip54_tests.cpp:1559adversarial:2 | publish | Accepted, sole | report |
| #35793 | The 2501-sigop P2SH vector has invalid signatures on its first 25 inputssrc/test/bip54_tests.cpp:339adversarial:3 | publish | Accepted, sole | report |
| #36325 | Repeated keys are counted as separate multisig cosignerscontrib/multisig/wizard.py:201adversarial:1 | publish | Accepted, shared | report |
| #36325 | Repeated keys are counted as separate multisig cosignerscontrib/multisig/wizard.py:201adversarial:2 | publish | Accepted, shared | report |
| #36325 | Key matching calls derivehdkey with paths the RPC rejectscontrib/multisig/wizard.py:274adversarial:3 | publish | Accepted, shared | report |
| #36325 | Prevent repeated imports from resetting issued-address statecontrib/multisig/wizard.py:345adversarial:4 | drop | Not accepted | report |
| #36325 | Origin-tagged raw public keys pass validation but cannot be rangedcontrib/multisig/wizard.py:81adversarial:5 | publish | Accepted, shared | report |
| #36628 | The design overstates the bound on first attempts per exitdoc/design/private-broadcast.md:465adversarial:1 | publish | Accepted, sole | report |
| #36628 | Candidate assignment rules lack direct unit coveragesrc/test/privbcast_plan_tests.cpp:17adversarial:2 | publish | Accepted, sole | report |
| #35888 | Oversized test-chain transactions can abort Debug builds during relaysrc/net.cpp:4169adversarial:1 | publish | Accepted, sole | report |
| #35888 | Outbound limits test does not assert that oversized messages trigger `Assume`src/test/net_tests.cpp:1407adversarial:2 | publish | Accepted, sole | report |
| #36629 | Stale script-index rows survive a restart and are read against the wrong blocksrc/index/txoscriptindex.cpp:81adversarial:1 | publish | Accepted, shared | report |
| #36629 | A spender after the asof block is re-read once for each matched output it spendssrc/rpc/blockchain.cpp:4095adversarial:2 | publish | Accepted, shared | report |
| #36629 | Verbosity-2 block and undo reads are not charged to the lookup budgetsrc/rpc/blockchain.cpp:4148adversarial:3 | publish | Accepted, shared | report |
| #36000 | Pending block reads can outlive the kernel context during teardownsrc/validation.cpp:1868adversarial:1 | publish | Accepted, sole | report |
| #36015 | The orphan RPC rebuilds every transaction while holding the download mutexsrc/node/txorphanage.cpp:783adversarial:1 | publish | Accepted, shared | report |
| #36015 | Cheap parent variants repeatedly deserialize the same missing-input orphansrc/node/txdownloadman_impl.cpp:321adversarial:2 | publish | Accepted, shared | report |
| #36033 | Two CI jobs use compilers that cannot build the treeCMakeLists.txt:84adversarial:1 | publish | Accepted, shared | report |
| #36033 | The documented compiler minimums cannot build this revisiondoc/release-notes-36033.md:4adversarial:2 | publish | Accepted, shared | report |
| #36042 | The format check misidentifies a missing standard-library feature as an old compilercmake/module/CheckCXXFeatures.cmake:52adversarial:1 | publish | Accepted, shared | report |
| #36060 | The in-tree KJ probe re-resolves libkj instead of using IPC's Cap'n Proto targetcmake/libmultiprocess.cmake:13adversarial:1 | publish | Accepted, shared | report |
| #36060 | External libmultiprocess builds leave Core IPC targets on KJ autodetectionsrc/ipc/CMakeLists.txt:65adversarial:2 | publish | Accepted, shared | report |
| #36434 | `bitcoin-cli` rejects the unspecified address `0.0.0.0`src/netbase.cpp:834adversarial:1 | publish | Accepted, sole | report |
| #36434 | Startup can replace another node’s live Unix RPC socketsrc/netbase.cpp:801adversarial:2 | publish | Accepted, shared | report |
| #36434 | `BitcoinHTTPConnection.reset_conn()` drops the configured timeouttest/functional/interface_http.py:48adversarial:3 | publish | Accepted, shared | report |
| #36677 | The new test does not cover exclusive-create or append semanticssrc/test/fs_tests.cpp:153adversarial:1 | publish | Accepted, shared | report |
| #35714 | Propagate failed forced flushes to callers that require current coins datasrc/validation.cpp:2784adversarial:1 | drop | Not accepted | report |
| #35714 | The flush-failure test does not check recovery on a later flushsrc/test/chainstate_write_tests.cpp:116adversarial:2 | publish | Accepted, sole | report |
| #36434 | `bitcoin-cli` rejects `-rpcconnect=0.0.0.0` before connectingsrc/netbase.cpp:834adversarial:1 | publish | Accepted, sole | report |
| #36434 | `BitcoinHTTPConnection.reset_conn()` drops the configured timeouttest/functional/interface_http.py:48adversarial:2 | publish | Accepted, shared | report |
| #36434 | Startup can replace an active Unix RPC socketsrc/netbase.cpp:801adversarial:3 | publish | Accepted, shared | report |
| #36434 | Release note overstates when a non-socket path prevents startupdoc/release-notes-36434.md:20adversarial:4 | publish | Accepted, sole | report |
| #36114 | Already-finalized inputs cause external-signer requests to failsrc/external_signer.cpp:170adversarial:1 | publish | Accepted, shared | report |
| #36114 | PSBTv2 responses can change an omitted input sequencesrc/external_signer.cpp:181adversarial:2 | publish | Accepted, shared | report |
| #36677 | The test does not cover key fopen mode semantics on macOS and BSDsrc/test/fs_tests.cpp:153adversarial:1 | publish | Accepted, shared | report |
| #36122 | PSBT completion accepts unverified CISA aggregate witnessessrc/psbt.cpp:938adversarial:1 | publish | Accepted, shared | report |
| #36122 | `descriptorprocesspsbt` cannot retain fullagg secret noncessrc/rpc/rawtransaction.cpp:2157adversarial:2 | publish | Accepted, shared | report |
| #36122 | Fullagg signing uses unresolved group sighash valuessrc/psbt.cpp:765adversarial:3 | publish | Accepted, shared | report |
| #35731 | A block-file flush error leaves the coins tip ahead of the active chainsrc/validation.cpp:2797adversarial:1 | publish | Accepted, shared | report |
| #35731 | The flush-failure test does not check persisted block-index or coins statesrc/test/chainstate_write_tests.cpp:129adversarial:2 | publish | Accepted, shared | report |
| #36434 | Startup unlinks an active RPC socket instead of reporting a conflictsrc/netbase.cpp:801adversarial:1 | publish | Accepted, shared | report |
| #36434 | Release notes overstate when a non-socket path prevents startupdoc/release-notes-36434.md:21adversarial:2 | publish | Accepted, shared | report |
| #36188 | Reconsider the separate verification context: verification does not use blindingsrc/ecc_context.cpp:48adversarial:1 | drop | Not accepted | report |
| #36188 | DER-lax fuzz target creates an unused ECC context for each parsed inputsrc/test/fuzz/secp256k1_ecdsa_signature_parse_der_lax.cpp:29adversarial:2 | publish | Accepted, sole | report |
| #36648 | Malformed keys can still appear in parse errorssrc/script/descriptor.cpp:2831adversarial:1 | publish | Accepted, shared | report |
| #36142 | Malformed-key tests do not verify that a cached key survivestest/functional/feature_torcontrol.py:341adversarial:1 | publish | Accepted, sole | report |
| #36628 | Assignment rules lack direct unit testssrc/test/privbcast_plan_tests.cpp:17adversarial:1 | publish | Accepted, sole | report |
| #35793 | Future-leaf test vector reuses the Tapscript witnesssrc/test/bip54_tests.cpp:1060adversarial:1 | publish | Accepted, sole | report |
| #33904 | Successful responses omit a cache directivesrc/rest.cpp:1014adversarial:1 | publish | Accepted, shared | report |
| #33904 | REST results can differ from request ordersrc/rest.cpp:987adversarial:2 | publish | Accepted, shared | report |
| #36677 | POSIX close-on-exec is not atomic with opening the filesrc/util/fs.cpp:26adversarial:1 | publish | Accepted, shared | report |
| #36608 | Private submitpackage uses BIP141 size for the single-transaction maxfeerate checksrc/rpc/mempool.cpp:1488adversarial:1 | publish | Accepted, shared | report |
| #36608 | Test acceptance pools replacement checks for a parent and childsrc/validation.cpp:1761adversarial:2 | publish | Accepted, shared | report |
| #36628 | Candidate assignment rules lack direct test coveragesrc/test/privbcast_plan_tests.cpp:17adversarial:1 | publish | Accepted, sole | report |
| #33904 | Mixed mempool and index results do not preserve request ordersrc/rest.cpp:987adversarial:1 | publish | Accepted, shared | report |
| #33904 | Successful responses omit `Cache-Control: no-store`src/rest.cpp:1014adversarial:2 | publish | Accepted, shared | report |
| #33904 | Mixed lookups return results out of request ordersrc/rest.cpp:986adversarial:1 | publish | Accepted, shared | report |
| #33904 | Successful responses omit `Cache-Control: no-store`src/rest.cpp:1013adversarial:2 | publish | Accepted, shared | report |
| #36167 | `maxtries` and `psbt_version` now accept different integer rangessrc/rpc/mining.cpp:317adversarial:1 | publish | Accepted, shared | report |
Run status
- completed
- 128
- skipped
- 45
- Saved runs
- 173
- Executed runs
- 128
Reported coverage
- complete
- 119
- failed
- 0
- partial
- 9
- unknown
- 45
Candidate decisions
- drop
- 8
- publish
- 211
- undisposed
- 8
- unresolved
- 5
- Selected among assessed
- 94.2%
- Accepted / executed run
- 1.617
- Conceptual concerns
- 0
Selection uses publish, drop and unresolved candidates; unassessed candidates are excluded.
Usage
- Request records
- 1,361
- Input tokens
- 90,243,980 (partial)
- Cached tokens
- 75,783,040 (partial)
- Output tokens
- 478,623 (partial)
- Unknown usage records
- 8