Monero Dev Activity Report - Week 38 2026: 95 PRs, 13 Issues
This weekly report aims to provide a big picture view of Monero development activity, increase community support for existing devs and, hopefully, encourage new contributions.
1 - PRs (95, 37:17:41)
Opened (37)
monero-project/monero:
- #113201 Harden CLI handling of daemon responses [release-v0.18] (selsta)
- #113192 Harden CLI handling of daemon responses (selsta)
- #113303 cryptonote_basic: log invalid hash input size (selsta)
- #113294 epee: scale RPC timeouts by configured per-IP limits (woodser)
- #113275 cmake: use relative source/binary project paths (jeffro256)
- #113186 cryptonote_core: handle future txpool times (Ap4sh)
- #113327 wallet: pending_tx_sanity_checker followup - #11260 [release-v0.18] (UkoeHB)
- #113338 wallet: fix inconsistent tx pubkey handling (selsta)
- #113319 multisig: erase all copies of a nonce at the same time [release-v0.18] (UkoeHB)
- #1133610 wallet2: preserve required SSL when allowing chained certificates [release-v0.18] (selsta)
- #1133511 wallet2: preserve required SSL when allowing chained certificates (selsta)
- #1133412 multisig: erase all copies of a nonce at the same time (UkoeHB)
- #1133813 epee: remove obsolete MyMonero conversion [release-v0.18] (selsta)
- #1133714 epee: remove obsolete MyMonero conversion (selsta)
- #1132815 epee: scale RPC timeouts by configured per-IP limits [release-v0.18] (woodser)
- #1134216 cmake: static builds need to indicate desired boost build variant (j-berman)
- #1134317 fuzz: add multisig kex and wallet import fuzz tests (jpk68)
- #1134618 wallet2: validate block hash when repairing empty hashchain (selsta)
- #1134719 wallet2: validate block hash when repairing empty hashchain [release-v0.18] (selsta)
- #1133920 txpool: don’t drop cxns relaying key images spent in chain (j-berman)
- #1134921 Add checks in cryptonote serialization routine [0.18] (vtnerd)
- #1134822 device: protect against buffer overflow (jpk68)
- #1135123 rpc: adjust distribution cache validation order (selsta)
- #1135224 rpc: adjust distribution cache validation order [release-v0.18] (selsta)
- #1135525 rpc: restrict get_public_nodes to public zone peers (jpk68)
- #1135626 rpc: restrict get_public_nodes to public zone peers [release-v0.18] (jpk68)
- #1135027 wallet_rpc_server: Expose wallet exist as rpc command (deverickapollo)
- #1132128 blockchain: fix lock ordering in check_against_checkpoints (selsta)
- #1135329 wallet: add multi-recipient URI RPC methods (proofline-studio)
- #1135730 cli: add –disable-md5 to disable HTTP Digest Auth MD5 algo (PyXMR2025)
- #1134531 epee: support SHA-256 in HTTP Digest Auth (PyXMR2025)
- #1135432 blockchain_import: use pool supplements for block verification (selsta)
monero-project/monero-gui:
- #470933 Wallet: keep daemon credentials scoped to each connection (selsta)
- #471034 main: fix localhost proxy bypass (selsta)
- #471135 openpgp: reject unsupported hash algorithms (selsta)
- #471336 components: make standard dialog less intrusive (jpk68)
monero-project/monero-site:
- #270737 pnpm: harden against supply chain attacks (plowsof)
Closed (17)
monero-project/monero:
- #991838 add functions to Wallet API [release] (SNeedlewoods)
- #991539 remove cached password from Wallet API [release] (SNeedlewoods)
- #1129640 epee: respect max-connections-per-ip in aggressive timeout logic (jpk68)
- #1122941 wallet2: fix reserve proof verification with multiple tx pubkeys [release-v0.18] (selsta)
- #1122842 wallet2: fix reserve proof verification with multiple tx pubkeys (selsta)
- #1124043 trezor: check additional tx key index bounds when signing (selsta)
- #1124144 trezor: check additional tx key index bounds when signing [release-v0.18] (selsta)
- #1129745 wallet2: handle non-curve tx public keys in reserve proofs (selsta)
- #1129846 wallet2: handle non-curve tx public keys in reserve proofs [release-v0.18] (selsta)
- #1131247 db: Making monerod able to notify user about truncated database corruption (EntropyHoover)
- #1134148 epee: bind digest auth to request-target (jpk68)
- #1130949 rpc: support http login with auth config (PyXMR2025)
- #1134450 epee: support SHA-256 in HTTP Digest Auth (PyXMR2025)
- #1109351 wallet: avoid stale daemon calls during tx build (guoqiangliu-ocean)
monero-project/monero-gui :
- #377452 WizardWalletInput: disallow special characters in wallet name (rating89us)
monero-project/monero-site:
- #270153 deps: remove unused htmlhint and unist-util-visit, declare @types/node [beta] (thomasbuilds)
- #270354 Update deps [beta] (thomasbuilds)
Merged (41)
monero-project/monero:
- #1036155 FCMP++: tower cycle Curve class + hash_grow implementation + tests (j-berman)
- #1102456 common: don’t calibrate perf timer at static init (jpk68)
- #1128757 ci: replace EOL Debian 11 with Debian 12 [release-v0.18] (thomasbuilds)
- #1123758 crypto: handle unaligned Keccak output (Ap4sh)
- #1124659 dns_utils: don’t leave ub_result pointer uninitialized (jpk68)
- #1125060 wallet_rpc_server: use start mining response (Ap4sh)
- #1125161 Wallet API: setStatusCritical for recoverFromDevice failure (SNeedlewoods)
- #1125562 wallet_rpc_server: validate seed language early (Ap4sh)
- #1125763 wallet_rpc_server: reject –password with –wallet-dir (thomasbuilds)
- #1125864 wallet_rpc_server: reject –password with –wallet-dir [release-v0.18] (thomasbuilds)
- #1126765 crypto: init p3 double scalarmult result when both scalars are zero (thomasbuilds)
- #1129966 p2p: update peer’s height on new block & widen window for relay [v0.18] (j-berman)
- #1130067 blockchain: if block is known invalid, fail block verification [v0.18] (j-berman)
- #1130168 cryptonote_core: rm unnecessary db reads before block relay [v0.18] (j-berman)
- #1130269 cryptonote_basic: serialization checks [v0.18] (j-berman)
- #1130370 blockchain: limit offsets cache size [v0.18] (j-berman)
- #1130471 tx_pool: do expensive verify after potential no-drop offenses [v0.18] (j-berman)
- #1130572 p2p: don’t reset timeout timer for handshakes [v0.18] (j-berman)
- #1103573 wallet_api: reject transaction file signing with hardware wallets (selsta)
- #1124574 daemon: don’t ignore dnssec validation result in start_mining (jpk68)
- #1128075 rpc: add network type to get_version response (jpk68)
- #1127976 lmdb: increase minimum batch resize increment to 1 GiB (selsta)
- #1123877 rpc: reject deep block submissions on restricted RPC (selsta)
- #1051078 wallet2: fix derivation handling in check_tx_proof and is_out_to_acc (selsta)
- #1128179 lmdb: make transaction admission reentrant (selsta)
- #1123980 rpc: reject deep block submissions on restricted RPC [release-v0.18] (selsta)
- #1088681 p2p: omit sync data when retrieving seed peerlist (selsta)
- #1088782 p2p: avoid retrying recently failed seed nodes (selsta)
- #1132583 cmake: C++17 comment typo (jeffro256)
- #1129384 epee: fix fragmented Levin messages on big endian (Ap4sh)
- #1130885 net: accept SOCKS5 domain reply addresses (Ap4sh)
- #1131486 common: validate update hashes (Ap4sh)
- #1132287 http: bind Digest authentication to the request URI (selsta)
- #1131688 p2p: reject unspecified IPv6 peer addresses (selsta)
- #1132389 wallet_api: clear stale daemon login (selsta)
- #1132490 wallet_api: clear stale daemon login [release-v0.18] (selsta)
- #1076591 Polyseed support for ‘wallet2’, Wallet API, CLI wallet app, wallet RPC server (rbrunner7)
- #1086192 wallet: let set_daemon override –proxy (nahuhh)
monero-project/monero-gui: none
monero-project/monero-site:
- #269693 styles: fix RTL rendering of step numbers and external link icons [beta] (redsh4de)
- #263994 deps: upgrade to astro v7 [beta] (redsh4de)
- #270295 Fix footer links [beta] (thomasbuilds)
2 - ISSUES (13, 2:11)
Opened (2)
monero-project/monero:
- #1134096 view wallet show_transfers mismatch after importing key images (self send to multiple subaddr) (plowsof)
monero-project/monero-gui: none
monero-project/monero-site:
- #270897 Add Guarda Wallet to /downloads/ (third-party wallets) (artemfrostderten-netizen)
Closed (11)
monero-project/monero:
- #625098 Cannot connect to peers or sync with monerod-0.15.0.1 (pkreuzt)
- #1015499 Seed nodes connect to themselves (nahuhh)
- #10178100 interrupting –prune-blockchain cancels historical pruning (nahuhh)
- #9352101 ERROR: chunk size exceeds buffer size while exporting monero database (PunchEnergyFTW)
- #6595102 get_reserve_proof returns valid proof with amount greater than account balance (woodser)
- #6206103 ssl: lack of ECDSA cert with USE_EXTRA_EC_CERT (bjacquin)
monero-project/monero-gui:
- #4712104 Gui freezes after RDP disconnect (call-eax)
- #2261105 Wallet shows “Unlocked balance (waiting for block)” but functions normally (exotic-particle)
- #4557106 Communication Monero GUI from official Manjaro Repro and Trezor Safe 3 fails (OnAirDroid)
- #2452107 Feature request: support rpc_payments (sebseb7)
monero-project/monero-site:
- #2706108 hashes.txt.sig fails GPG verification against current hashes.txt (v0.18.5.1) (AlexanderWalls)
That’s it for this week’s dev activity report. I will try and publish one every Sunday. Let me know if I missed anything or if you want to see any other statistics/repos included in future reports. Feedback/edits: @ /about.
Previous reports are listed in the [dev] section.
-3RA