Every deposit address on this instance is a BIP32 derivation of the operator's published xpub — a watch-only capability that cannot spend the funds it generates. Paste the xpub and any deposit address, and we'll prove it.
The service watches for incoming USDT/USDC at addresses derived
non-hardened from the operator's account-level xpub: m/44'/coin'/0'/0/index
(coin type 60 for the EVM chains; 195 for Tron). An xpub cannot
produce the private keys for these addresses — only the operator's
offline hardware wallet can.
We BIP32-derive up to 1000 indices under the xpub you paste, compare each derived address to the one you paste, and report a hit (with the exact path) or a miss. The endpoint never reads the operator's configured xpub from the database — the xpub comes from you, the verifier, only.