<p>A multisig setup needs all cosigners' extended public keys because any of them, at any time, without the real time manifestation of the others, can derive the child public keys and generate all the addresses of this multisig.</p>
<blockquote>
<p>However, what would happen if someone got a hold of my Xpub file only?</p>
</blockquote>
<p>The multisig has N extended keys, where N is obtained from the format M-of-N multisig. If someone gets all of the extended public keys, they can generate all the addresses (watch-only wallet).</p>
<blockquote>
<p>Am I correct they could view my holdings and transactions</p>
</blockquote>
<p>You are.</p>
<blockquote>
<p>but without the minimum number of seeds/wallets, they could not send?</p>
</blockquote>
<p>Sending imply having the private key able to sign, which signature matches one of the public keys that construct the address. From the xpub file we cannot extract the private key, so no signing is possible.</p>
<blockquote>
<p>If I’m not sure Xpub file has been compromised, is it still a good idea to update my multisig set up?</p>
</blockquote>
<p><strong>Sure</strong> is a strong word. If you think someone is sniffing your wallet operations you could do that but as said, they could not sign any transaction.</p>

CC BY-SA 4.0
2022-12-28T02:52:32.533Z
2022-12-28T02:52:32.533Z
phantom
<p>I have a multisig set up.</p>
<p>My seeds and hardware wallets are secure.</p>
<p>However, what would happen if someone got a hold of my Xpub file only?</p>
<p>Am I correct they could view my holdings and transactions, but without the minimum number of seeds/wallets, they could not send?</p>
<p>If I’m not sure Xpub file has been compromised, is it still a good idea to update my multisig set up?</p>
<p>Thank you</p>

<security><multi-signature><xpub>
If Multisig Xpub is compromised, but not the seeds or wallets
user135120
# If Multisig Xpub is compromised, but not the seeds or wallets

(Asked by: username_0 on 2022-12-26)

I have a multisig set up.

My seeds and hardware wallets are secure.

However, what would happen if someone got a hold of my Xpub file only?

Am I correct they could view my holdings and transactions, but without the minimum number of seeds/wallets, they could not send?

If I’m not sure Xpub file has been compromised, is it still a good idea to update my multisig set up?

Thank you

**Tags:** security, multi-signature, xpub


---

## 1 answers

### Answer by username_1 on 2022-12-28. Score: 2

A multisig setup needs all cosigners' extended public keys because any of them, at any time, without the real time manifestation of the others, can derive the child public keys and generate all the addresses of this multisig.

> However, what would happen if someone got a hold of my Xpub file only?

The multisig has N extended keys, where N is obtained from the format M-of-N multisig. If someone gets all of the extended public keys, they can generate all the addresses (watch-only wallet).

> Am I correct they could view my holdings and transactions

You are.

> but without the minimum number of seeds/wallets, they could not send?

Sending imply having the private key able to sign, which signature matches one of the public keys that construct the address. From the xpub file we cannot extract the private key, so no signing is possible.

> If I’m not sure Xpub file has been compromised, is it still a good idea to update my multisig set up?

**Sure** is a strong word. If you think someone is sniffing your wallet operations you could do that but as said, they could not sign any transaction.


---

