Your wallet’s list of addresses is generated by your xpub (extended public key).

If that xpub (and all of its addresses) have been leaked, then any address you use will be linkable (with some effort) to that initial KYC’d transaction.

I don’t believe you can infer an xpub from a wallet address (although I could definitely be wrong about that, so #asknostr), but your watching wallet software (and I maybe even the node you broadcast transactions to?) can see your xpub/addresses.

So if you use Ledger Live, for example, then Ledger does know all of your addresses. It would take coordination between Ledger and the exchange to dox all of your addresses, but it’s possible in a way that doesn’t exist when you have a separate, KYC-free wallet. (Highly recommend).

The other difficulty (which I think you’re covered in when emptying a wallet) involves change addresses. You can end up accidentally doxxing your stack if you “share” a wallet because of how UTXOs are managed.

It’s 1000% better to have separate wallets, separate stacks, to never need to worry about this.

Reply to this note

Please Login to reply.

Discussion

Very good explanation! Thank you so much 🙏🫂💜

Glad to help 🫂

Would srperation be given by generating a fresh wallet with a fresh passphrase?

I believe so, but I’m not sure. Paging nostr:npub1ltt9gry09lf2z6396rvzmk2a8wkh3yx5xhgkjzzg5znh62yr53rs0hk97y for this one

What if you derive a first xpub with a passphrase. Is Ledger able to link the 2 xpubs?

If you’re using their software wallet, I’m pretty sure ledger can see everything you do, along with your IP address if you don’t use a VPN, which they store for 5 years:

https://www.ledger.com/privacy-policy

😱😱😱😱

Correct