Remember all those xpubs Samourai collected?

If you used Whirlpool in the past I would assume those UTXOs have no privacy.

Coinsreporter

> your xpub (a master public key, allowing anyone holding it to derive all your past/present/future Bitcoin addresses) was at some point in time held by Samourai

this is lazy, but... can somebody point me to this point in their code so i can understand better what's actually happening? i'm not fluent in Java, but i can understand code.

i started looking yesterday, but haven't found it.
