I understand that with
- Un-hardened parent extended public key
- child private key
This will leads to compromise of parent private key and so all the private keys of siblings
BIP44 suggests the path
m / purpose' / coin_type' / account' / change / address_index
Let's say I use the path
m/44'/0'/0'/0 to derive public keys for account
address_index is not hardened. And in my application I will have the
extended public key at level
m/44'/0'/0'/0 revealed (to derive addresses), does it means that if any of the private keys derived at the
address_index level is compromised, all the private keys within the same account may also be compromised?
So with this path only avoid further compromise up to
- Other accounts and
- Further up to the master key?
Am I correct?