Can a leaked Bitcoin xpub become dangerous if one non-hardened child private key also leaks?

Yes. In ordinary BIP32 non-hardened derivation, the parent extended public key combined with one child private key can reveal the parent private key. This is a stronger risk than xpub exposure alone.

The answer

Yes. In ordinary BIP32 non-hardened derivation, the parent extended public key combined with one child private key can reveal the parent private key. This is a stronger risk than xpub exposure alone.

What to do next

Treat such a combination as key compromise; migrate coins with trusted recovery procedures and rotate account-level keys.

USEFUL TOOL OR DOCUMENTATION

Bitcoin BIP32 specification

This resource helps with the question, but is not presented as a commissionable partner.

Visit Bitcoin BIP32 specification ↗Useful research or product resource; no affiliate status assumed.
RELATED PRODUCT OR SERVICE

NordVPN network privacy service

Relevant to protecting the network connection, not to making blockchain transactions untraceable.

Explore NordVPN network privacy service ↗Official website; affiliate programme available to apply for. No tracked link or partner approval yet.

Related crypto questions

Frequently asked questions

Does hardened derivation have this same child-key weakness?

No. Hardened derivation was designed to prevent this specific parent-key recovery from a child private key plus parent xpub.

More guides