Solana Funding Rate Arbitrage

Solana perpetual DEX funding rate arbitrage - scanner and auto-trader. Compares funding rates across Drift and Flash Trade to find and execute cross-DEX arbitrage opportunities. Use when analyzing Solana perp funding rates, finding funding arbitrage, setting up delta-neutral strategies, or running automated funding collection. Includes Monte Carlo simulation, backtesting, and full auto-trading capabilities.

This package contains real trading code and will, if configured for live mode, require and use your Solana private key (or keypair file) and an RPC endpoint. That is consistent with its purpose but the registry metadata incorrectly lists no required env vars — treat that as a red flag. Before installing or running: 1) Inspect the auto-trader and sendTransaction code paths yourself (or have a trusted reviewer) to confirm there are no hidden remote endpoints or backdoors. 2) Do NOT put a production private key with meaningful funds into .env; use a small test key or a restricted wallet. Prefer hardware-wallet or a signing service if possible. 3) Start in dry_run mode and run the backtests locally; confirm behavior of cron-runner.sh and where logs/state are written (~/.clawd and ~/.secrets). 4) Verify package.json and package-lock to ensure dependencies are expected; run npm install in an isolated environment or container. 5) Consider running the code in a sandboxed VM with a limited-key (tiny balance) and network monitoring before trusting it with real funds. 6) If you plan to use it live, update the registry metadata (or request the publisher do so) so required env vars and runtime are explicit. If you cannot audit the code, avoid giving this skill any private key or enabling autonomous live trading.

Type: OpenClaw Skill Name: solana-funding-arb Version: 2.1.0 This skill is classified as suspicious due to its inherent high-risk capabilities, despite being aligned with its stated purpose as an automated trading bot. Key indicators include the handling of sensitive `SOLANA_PRIVATE_KEY` or `SOLANA_WALLET_PATH` for direct blockchain transactions (scripts/src/index.ts, scripts/src/core/funding-arbitrage.ts, scripts/src/trading/drift-client.ts, scripts/src/trading/flash-client.ts) and the establishment of persistence via a cron job (SKILL.md, scripts/cron-runner.sh). While these actions are necessary for a trading bot, they represent significant security risks if compromised or misused. There is no clear evidence of intentional malicious behavior like unauthorized data exfiltration or stealthy backdoors; the documentation is transparent about these capabilities.