munzzyy opened pull request #11020: simplewallet: use the swept account for index=all in sweep_main

> monero-project/monero #11020

munzzyy opened pull request #11019: cryptonote_basic: keep additional derivations aligned in key image hel...

> monero-project/monero #11019

munzzyy opened pull request #11018: wallet2: clamp export_outputs start to the number of transfers

> monero-project/monero #11018

<thomasbuilds:matrix.org> HackerOne:

<thomasbuilds:matrix.org> > Starting August 14, 2026, submitting to Bug Bounty Programs (BBPs) on the H1 Platform will require a verified identity.

<thomasbuilds:matrix.org> > Should we remove hackerone for incident response?

<rbrunner7> Are we connected there with such a "BBP"?

<rbrunner7> Seems to me to ask for verified identity for each and every H1 submission does not seem to be feasible

<thomasbuilds:matrix.org> @rbrunner7: idk what BBP is but we should ping selsta on this

<thomasbuilds:matrix.org> lol my brain is starting slow it's Bug Bounty Program

<thomasbuilds:matrix.org> yes ofc we do that

<rbrunner7> Yes, we offer bounties, but I suspect that "Bug Boundty Program" is something more formal, where maybe you contract somehow, announce minimum bounties, etc. Monero is not be found here, for what it's worth: hackerone.com/bug-bounty-programs

<thomasbuilds:matrix.org> Btw I'd recommend creating a .github repo where you can add SECURITY.md and it gets rendered on every monero repo in security tab.

I disagree that we should remove it. What's the alternative beyond email which we already offer as an alternative?

<syntheticbird> don't forget IRC

<syntheticbird> (supposedly)

<thomasbuilds:matrix.org> selsta: upon further research monero is VDP (Vulnerability Disclosure Program) so it's unaffected

.merge+ 10976 10977 10978 10979 10980 10981 10982 10945 10946

Added

karimhassan777-ux opened issue #11021: Problem with a transaction from mymonero wallet not showing to the rec...

> monero-project/monero #11021

woodser opened pull request #11023: device: implement default device locking [release-v0.18]

> monero-project/monero #11023

woodser opened pull request #11022: device: implement default device locking

> monero-project/monero #11022

.merge+ 10984

Added

.merges

10812 10945 10946 10964 10976 10977 10978 10979 10980 10981 10982 10984 11013

.merges

10812 10964 10982 11013

.merges

10964 10982

jpk68 opened pull request #11024: common: don't calibrate perf timer at static init

> monero-project/monero #11024