ChoiGPT Binance Trading Bot

• Analyzed: May 11, 2026, 5:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: b637523960e747d2c98916960b06b9efdbb3935d542957eadbf44123602ea14a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle appears to be a functional Binance trading bot, but it contains a hardcoded Google Gemini API key in 'src/ai_analyzer.py' (AIzaSy...6xA), which is a significant security vulnerability and credential leak. While the code performs high-risk actions such as executing financial trades, managing API keys, and communicating with external endpoints (Binance, Telegram, Google), these behaviors are consistent with the stated purpose of a trading bot. No explicit evidence of intentional malice, such as data exfiltration of local secrets or unauthorized backdoors, was found; however, the presence of hardcoded credentials and the inherent risk of automated trading scripts warrant a suspicious classification.