ClawHub
Skill flagged — review recommended

ClawHub Security found sensitive or high-impact capabilities. Review the scan results before using.

crypto-treasury-ops

Safely manage EVM treasury operations and native Hyperliquid trading for OpenClaw agents, including wallet balance checks, guarded token transfers, cross-chain USDC bridging, Hyperliquid deposits, destination gas top-ups, trading safety, and structured quoting.

Audits

Suspicious
ClawScanSuspicious

Agentic behavior and permission review.

Static analysisPass

Pattern checks against bundled files.

VirusTotalPass

Multi-engine malware detections and file reputation.

Install

openclaw skills install crypto-treasury-ops

crypto-treasury-ops

Use this skill when an OpenClaw agent needs to inspect or operate a treasury wallet on Ethereum, Polygon, Arbitrum, or Base with explicit safety controls, or use Solana as a read path and bridge source chain.

What this skill does

  • Checks native and configured stablecoin balances
  • Checks Solana native SOL and configured SPL token balances
  • Transfers native assets or ERC-20 tokens on one chain
  • Bridges tokens across chains through a pluggable provider layer, including Solana -> EVM routes
  • Deposits USDC to Hyperliquid with guarded Arbitrum direct flow plus Polygon/Base routing
  • Reads Hyperliquid perpetual market state and account state
  • Places, protects, and cancels guarded Hyperliquid perpetual orders
  • Evaluates treasury safety policy before execution
  • Returns structured JSON for reliable downstream agent use

Runtime contract

Execution tools require environment configuration before build or runtime.

Required variables:

TREASURY_PRIVATE_KEY=0x...
SOLANA_TREASURY_PRIVATE_KEY=
ZEROX_API_KEY=...

Recommended workflow:

cp .env.example .env
# fill in the treasury private key and optional RPC overrides
npm install
npm run build

Important:

  • TREASURY_PRIVATE_KEY is required for EVM execution tools and as the default destination wallet for Solana -> EVM bridges
  • SOLANA_TREASURY_PRIVATE_KEY is required for executing Solana bridge transactions
  • SOLANA_TREASURY_ADDRESS can be used for read-only Solana quote context when no Solana signer is present
  • ZEROX_API_KEY is required for swap_token and swap quotes
  • MAYAN_API_KEY is optional but recommended for Solana bridge quote / execution rate limits
  • HYPERLIQUID_TRADING_* variables can further constrain market allowlists, order notional, leverage, and confirmation thresholds
  • The skill ships with built-in fallback RPC URL lists for Ethereum, Polygon, Arbitrum, Base, and Solana
  • RPC env vars such as ETHEREUM_RPC_URL and SOLANA_RPC_URL are optional overrides; comma-separated lists are supported
  • get_balances, get_hyperliquid_market_state, get_hyperliquid_account_state, safety_check, and some quote flows can run without a signer
  • Do not pass private keys in tool input JSON; this skill reads them from the environment only
  • Prefer a vault, KMS, HSM, or delegated signer in production instead of a raw hot-wallet private key in .env
  • For state-changing treasury operations, run quote_operation or dryRun=true immediately before execution so the route and balances are fresh

Invoke tools through the CLI:

node dist/index.js --action <tool_name> --input '<json>'

Tools

get_balances

Inputs:

  • walletAddress
  • chain
  • solanaAddress optional when chain=solana

Returns:

  • Native balance
  • Configured stablecoin balances for that chain
  • Symbols, decimals, raw amounts, and human-readable amounts

Notes:

  • chain=solana is supported for read-only balance queries
  • Solana execution is limited to bridge source flows only

transfer_token

Inputs:

  • chain
  • token
  • recipient
  • amount
  • approval optional
  • dryRun optional

Behavior:

  • Validates recipient format
  • Resolves token by symbol or address
  • Checks wallet balance before sending
  • Estimates gas
  • Runs safety policy
  • Rejects unsafe or underfunded transfers
  • Returns transfer summary and transaction hash

swap_token

Inputs:

  • chain
  • sellToken
  • buyToken
  • amount
  • recipient optional
  • slippageBps optional
  • approval optional
  • dryRun optional

Behavior:

  • Uses the configured swap provider abstraction
  • First implementation uses the 0x Swap API
  • Supports EVM ERC-20 swaps only
  • Rejects native gas token swaps such as raw ETH or POL; use wrapped tokens such as WETH
  • Quotes route, minimum received, gas, allowance target, and tx data
  • Checks treasury policy and gas reserve before execution
  • Executes only when approval and policy conditions pass

bridge_token

Inputs:

  • sourceChain
  • destinationChain
  • token
  • amount
  • approval optional
  • dryRun optional

Behavior:

  • Uses the configured bridge provider abstraction
  • Supports solana -> ethereum/arbitrum/base/polygon through Mayan
  • Quotes route, fees, minimum received, and tx data
  • Checks treasury policy, fee threshold, and gas reserve
  • Executes only when approval and policy conditions pass
  • Returns route summary, tx status, and explorer links when available
  • The first Solana bridge implementation supports SOL -> native destination gas token and same-symbol stablecoin routes such as USDC -> USDC
  • Solana bridge execution currently returns a submitted / pending status after the signed Solana transaction is broadcast; completion should be re-checked from the destination balance or explorer link

deposit_to_hyperliquid

Inputs:

  • sourceChain
  • token
  • amount
  • destination
  • approval optional
  • dryRun optional

Behavior:

  • Supports USDC only
  • Supports arbitrum direct deposits and polygon/base -> arbitrum -> hyperliquid
  • If Arbitrum gas is insufficient for the final deposit, can reserve source USDC and bridge enough Arbitrum ETH first
  • This is a multi-stage flow: optional gas top-up, bridge to Arbitrum, then Arbitrum USDC deposit into Hyperliquid
  • The tool now attempts balance-based recovery if a bridge status API is unreliable but funds have already arrived onchain
  • Rejects deposits to a different Hyperliquid wallet than the treasury signer
  • Does not support Solana-origin deposits or SOL
  • Hyperliquid may support separate Solana deposits through Unit-managed flows, but those are outside this skill
  • Rejects if minimum deposit or gas reserve requirements are not met
  • Returns the bridge leg, deposit leg, and final execution summary

Recommended agent workflow:

  • Call quote_operation first
  • If the quote is acceptable, call deposit_to_hyperliquid with dryRun=true
  • Only then call deposit_to_hyperliquid with dryRun=false
  • If execution returns an error after a partial bridge or top-up, do not blindly retry the original amount
  • Re-check base/polygon and arbitrum balances, then re-run quote_operation with the remaining source balance if a retry is needed

get_hyperliquid_market_state

Inputs:

  • market optional

Behavior:

  • Returns live Hyperliquid perpetual metadata and context
  • If market is omitted, returns the full supported perpetual market list
  • If market is provided, also returns best bid / ask from the live L2 snapshot
  • Supports HIP-3 / builder dex markets in dex:COIN format such as xyz:GOLD

get_hyperliquid_account_state

Inputs:

  • user optional
  • dex optional

Behavior:

  • Returns Hyperliquid perpetual account summary
  • Returns positions and open orders
  • If user is omitted, the skill uses the treasury signer address
  • If dex is provided, the tool queries that specific HIP-3 builder dex
  • Also returns abstractionState and dexAbstractionEnabled

place_hyperliquid_order

Inputs:

  • accountAddress optional for read-only dry-run / quote context
  • market
  • side
  • size
  • orderType
  • price required for limit orders
  • slippageBps optional for market orders
  • reduceOnly optional
  • leverage optional
  • marginMode optional
  • timeInForce optional for limit orders
  • enableDexAbstraction optional
  • approval optional
  • dryRun optional

Behavior:

  • Supports Hyperliquid perpetuals only
  • Supports builder dex perps in dex:COIN format such as xyz:GOLD
  • Supports market and limit orders in the first version
  • Market orders are translated into protected IOC orders with a configurable price cap
  • Optionally updates leverage before placing the order
  • Enforces market allowlist, max single order notional, max daily order notional, max leverage, and confirmation threshold
  • quote_operation supports this tool
  • If accountAddress is provided, dry-run and quote can use it for read-only account context
  • Real execution only proceeds when the signer matches the target Hyperliquid account
  • HIP-3 builder-dex execution requires Hyperliquid dexAbstraction
  • The skill does not silently switch abstraction mode
  • For HIP-3 orders, pass enableDexAbstraction=true if you want execution to switch the account into dexAbstraction first

Recommended agent workflow:

  • Call quote_operation first with operationType=place_hyperliquid_order
  • Review the returned safety block and notionalUsd
  • Call place_hyperliquid_order with dryRun=true
  • Only then call place_hyperliquid_order with dryRun=false

protect_hyperliquid_position

Inputs:

  • accountAddress optional for read-only dry-run / quote context
  • market
  • takeProfitRoePercent optional, default 100
  • stopLossRoePercent optional, default 50
  • replaceExisting optional
  • liquidationBufferBps optional, default 25
  • enableDexAbstraction optional
  • approval optional
  • dryRun optional

Behavior:

  • Reads the live Hyperliquid position for the requested market
  • Derives a full-size reduce-only take-profit trigger and a full-size reduce-only stop-loss trigger
  • Uses ROE-style rules relative to entry and leverage:
    • takeProfitRoePercent=100 means position equity doubling
    • stopLossRoePercent=50 means position equity halving
  • If the requested stop-loss would be beyond liquidation, the tool tightens it in front of liquidation using liquidationBufferBps and returns a warning
  • Uses native Hyperliquid trigger orders with reduce-only semantics
  • quote_operation supports this tool
  • Real execution only proceeds when the signer matches the target Hyperliquid account
  • For HIP-3 builder-dex positions, pass enableDexAbstraction=true if the account must first switch into dexAbstraction

Recommended agent workflow:

  • Call quote_operation first with operationType=protect_hyperliquid_position
  • Review any liquidation-adjustment warning before execution
  • Call protect_hyperliquid_position with dryRun=true
  • Only then call protect_hyperliquid_position with dryRun=false

cancel_hyperliquid_order

Inputs:

  • market
  • orderId
  • dryRun optional

Behavior:

  • Looks up the matching open order first
  • Rejects if the order is not currently open
  • Supports dry-run preview before cancellation

safety_check

Inputs:

  • operationType
  • chain
  • token
  • amount
  • destination optional
  • approval optional
  • feeBps optional
  • slippageBps optional

Behavior:

  • Enforces allowlists
  • Enforces max single transfer size
  • Enforces max daily transfer amount
  • Requires approval above the configured threshold
  • Rejects bridge and deposit flows with insufficient gas reserve
  • Rejects excessive estimated fees or slippage

quote_operation

Inputs:

  • operationType
  • operation-specific fields

Behavior:

  • Estimates balance impact, gas, route fees, and minimum received
  • Estimates Hyperliquid order notional, submission price, simulated fill price, and safety outcome for place_hyperliquid_order
  • Estimates derived TP/SL trigger prices and safety outcome for protect_hyperliquid_position
  • Returns a structured quote without execution

Examples

node dist/index.js --action get_balances --input '{"walletAddress":"0x1111111111111111111111111111111111111111","chain":"arbitrum"}'

node dist/index.js --action get_balances --input '{"chain":"solana","solanaAddress":"HK6y2RbhgDJLQ1gAmJatjEyZTjfK6MSHBtpoSN1Vx85A"}'

node dist/index.js --action transfer_token --input '{"chain":"base","token":"USDC","recipient":"0x2222222222222222222222222222222222222222","amount":"100","approval":true,"dryRun":true}'

node dist/index.js --action swap_token --input '{"chain":"arbitrum","sellToken":"USDC","buyToken":"WETH","amount":"250","approval":true,"dryRun":true,"slippageBps":50}'

node dist/index.js --action bridge_token --input '{"sourceChain":"polygon","destinationChain":"arbitrum","token":"USDC","amount":"2500","approval":true,"dryRun":true}'

node dist/index.js --action bridge_token --input '{"sourceChain":"solana","destinationChain":"ethereum","token":"SOL","amount":"0.02","approval":true,"dryRun":true}'

node dist/index.js --action deposit_to_hyperliquid --input '{"sourceChain":"base","token":"USDC","amount":"500","destination":"0xYourTreasuryWallet","approval":true,"dryRun":true}'

node dist/index.js --action get_hyperliquid_market_state --input '{"market":"ETH"}'

node dist/index.js --action get_hyperliquid_market_state --input '{"market":"xyz:GOLD"}'

node dist/index.js --action get_hyperliquid_account_state --input '{"user":"0xYourHyperliquidWallet"}'

node dist/index.js --action get_hyperliquid_account_state --input '{"user":"0xYourHyperliquidWallet","dex":"xyz"}'

node dist/index.js --action quote_operation --input '{"operationType":"place_hyperliquid_order","walletAddress":"0xYourHyperliquidWallet","market":"ETH","side":"buy","size":"0.01","orderType":"market","approval":true}'

node dist/index.js --action quote_operation --input '{"operationType":"place_hyperliquid_order","walletAddress":"0xYourHyperliquidWallet","market":"xyz:GOLD","side":"sell","size":"0.01","orderType":"market","approval":true,"enableDexAbstraction":true}'

node dist/index.js --action place_hyperliquid_order --input '{"accountAddress":"0xYourHyperliquidWallet","market":"ETH","side":"buy","size":"0.01","orderType":"limit","price":"2000","leverage":2,"approval":true,"dryRun":true}'

node dist/index.js --action place_hyperliquid_order --input '{"accountAddress":"0xYourHyperliquidWallet","market":"xyz:GOLD","side":"sell","size":"0.01","orderType":"market","approval":true,"enableDexAbstraction":true,"dryRun":true}'

node dist/index.js --action quote_operation --input '{"operationType":"protect_hyperliquid_position","walletAddress":"0xYourHyperliquidWallet","market":"BTC","takeProfitRoePercent":100,"stopLossRoePercent":50,"approval":true}'

node dist/index.js --action protect_hyperliquid_position --input '{"accountAddress":"0xYourHyperliquidWallet","market":"BTC","takeProfitRoePercent":100,"stopLossRoePercent":50,"approval":true,"dryRun":true}'

node dist/index.js --action cancel_hyperliquid_order --input '{"market":"ETH","orderId":123456,"dryRun":true}'

Safety defaults

  • Do not bypass safety_check reasoning. Execution tools perform the check again internally.
  • Treat rejected outputs as hard stops.
  • Prefer dryRun=true first for all new destinations or larger transfers.
  • Prefer quote_operation plus dryRun=true before any new Hyperliquid order.
  • Prefer protect_hyperliquid_position over ad hoc manual TP/SL math when protecting an existing Hyperliquid position.
  • Require explicit approval=true for amounts above the configured threshold.
  • Never assume a non-allowlisted destination is safe.
  • For multi-stage flows such as Hyperliquid deposits, never reuse a stale quoted amount after a partial execution. Re-quote from current balances first.