XPUB Debacle

[GenX755]

Is this only something that Swan can tell me because for me it’s a needle in a haystack scenario?

Yes, that is something that they can tell you easily by knowing how their platform works under the hood. Otherwise you will have to go through the most common derivation paths one by one to see if you can reproduce the same address. That is assuming their system didn't have any bugs and didn't give you a wrong key that can't be reproduced through conventional methods.

Got it. I’ll keep you posted they are looking into it Monday.

[GenX755]

Is this only something that Swan can tell me because for me it’s a needle in a haystack scenario?

Yes, that is something that they can tell you easily by knowing how their platform works under the hood. Otherwise you will have to go through the most common derivation paths one by one to see if you can reproduce the same address. That is assuming their system didn't have any bugs and didn't give you a wrong key that can't be reproduced through conventional methods.

I was able to locate the address on Ian Coleman by using my YPUB in the BIP32 Root Key and then going to BIP 141 and changing the Script Semantics to P2WPKH and the address is there, but when I put my mnemonic in to try and get the private key it changes the paths and I cannot pull of the private key for the address which I hoped to import into Electrum and get the BTC the hell out of there..I guess I am getting closer..

[pooya87]

I was able to locate the address on Ian Coleman by using my YPUB in the BIP32 Root Key and then going to BIP 141 and changing the Script Semantics to P2WPKH and the address is there, but when I put my mnemonic in to try and get the private key it changes the paths and I cannot pull of the private key for the address which I hoped to import into Electrum and get the BTC the hell out of there..I guess I am getting closer..

You are very close.
My guess is that you have a problem with the depth of the ypub itself, it may not have been the "master" pubkey at depth 0 but at some other depth that you used.
Use a tool to decode the ypub that shows you the depth, if you don't know any you could use an online base58 decoder and interpret the hex yourself. Like this one: https://www.appdevtools.com/base58-encoder-decoder Do NOT enter anything other than ypub here.

Example:

Code:

ypub6QqdH2c5z7967TFWm6bgcp1nxooAg5p1rwAngYcyiyWozfvvHGpJHfq9mwPy6AyDmr7QXdxFdQYgr2H2b7hWu9RDhusLx9kEXaLbDnZ9Anq

hex:

Code:

049d7cb2000000000000000000a222b3f337dd34b5129581402f2931902491ceceb6c9d38b10f4f1de92d1a4fc02ccab98f8e37f203b9f2d45886a2463d33d47d056c6d7c50d847b1cb8b448caa6680cae06

049d7cb2 is version, ignore that.
the next 2 characters (1 byte) is your depth. Here it is 00 so the depth is 0 and your paths are the same when you use your mnemonic

But

Code:

ypub6VLYPwH5724FUcGxDt4vNZBY9siFuTuXFQu2DC7LH2JVsYHyALB8d3c3aPCnrKuKKVYco41SCMw36pAYexRusZnruy2Ma86FJqgtNWrXfyT

Code:

049d7cb20264084c48000000006fd6f0d01ff8d8c2ee9bbf65f6e79f0ef8023cd76dcf1da44478c658e27e12f9020cc7fb0e5fd07d658a07f5bef431cb61ca89e6a76d125fe168298407f2b291a62f7009c2

049d7cb2 again is version, ignore it.
Depth is 02 so your depth is 2 and your paths are m/X/Y/{the_rest}.
So for example if you saw your address using your yprv at m/0/0/0 you have to change it to m/X/Y/0/0/0

If that's the case then your other challenge would be figuring out what X and Y are.

[HCP]

I was able to locate the address on Ian Coleman by using my YPUB in the BIP32 Root Key and then going to BIP 141 and changing the Script Semantics to P2WPKH and the address is there

In addition to the depth field as per the decoded key in pooya's post... When you put the YPUB in as the BIP32 Root Key, what is the "BIP32 derivation path" showing under the "BIP141" when you can see your address?

[GenX755]

I was able to locate the address on Ian Coleman by using my YPUB in the BIP32 Root Key and then going to BIP 141 and changing the Script Semantics to P2WPKH and the address is there

In addition to the depth field as per the decoded key in pooya's post... When you put the YPUB in as the BIP32 Root Key, what is the "BIP32 derivation path" showing under the "BIP141" when you can see your address?

So I cheated, I had a more technical friend help me out and ultimately as discussed he made me find it using the Bip 32 Root key derived from my YPUB and going to Bip 141 and then if we changed the script semantics to P2WPKH the address was there. He then had me upload my mnemonic offline and get the private key for that specific address and we imported it into Electrum and got it out.

According to the exchange "We convert the extended public key according to the user selection (3... or bc1...), because the x/y/z stuff is not set in stone but a loose convention. For example, some wallets produce "x"pubs even though they should by "z"pubs - so we can't rely on the "x" or "y" or "z" input. Therefore the user's selection is very important. Since you selected bc1 here, it impacted our derivation path."

They said they will make a change to their service and make users type and confirm the address prior to approving the Y/XPUB.

[HCP]

Seems like a good result all around. You've managed to secure your coins and the service is going to update their UI to hopefully prevent a similar situation from occurring for other users in the future.