pull down to refresh

68 sats \ 1 reply \ @optimism 26 Mar \ parent \ on: Publicly available/known xpubx (public keys), for review/research? bitcoin
So, if they had this - "private key to a single address derived from the xpub" -- AND they had the extended public key, then they could figure out the extended PRIVATE key, and basically steal your bitcoin, is that right?
Yes.
But wouldn't it be really hard to get the "private key to a single address derived from the xpub"?
Yes, but "hard" does not equate impossible. And if you publish your extpub to prove that yes, you really have 2000 BTC, you're a target, congrats.
How would you do that without actually having access to the full extended private key?
How it was done with bybit (#898258): trick you into signing something for 1 of the addresses, something low risk, and then just sweep the whole address range under the xpub
write
preview
100 sats \ 0 replies \ @Signal312 OP 26 Mar
Got it. Thanks!
reply