AI News BNB Trader

This repository contains a real trading bot that will perform on-chain swaps and can revoke approvals — it legitimately needs a wallet private key (or an encrypted key + passphrase), RPC endpoints, and optional API keys (OpenAI, 1inch). The registry metadata omits these required env vars, which is a red flag: before running, review the code locally, and follow these precautions: - Do not supply your main/large-balance wallet private key. Use a fresh wallet with minimal funds for testing. - Keep DRY_RUN=true while evaluating; verify behavior in dry-run mode and inspect logs and saved state-data before enabling real trades. - Inspect NEWS_API_URL and NEWS_WS_URL sources to ensure they are trusted (the bot executes trades based on that feed). - If using the encrypt CLI, the code uses AES-256-GCM + scrypt; verify encryption/decryption locally and ensure KEY_PASSPHRASE is handled securely. Note the logger redacts some envs but not KEY_PASSPHRASE or RPC secrets — avoid putting passphrases into logs or shared environments. - Audit and limit RPC and DEX API credentials; prefer a private RPC provider and restrict API keys to minimal scopes where possible. - Consider running in an isolated environment (container, VM) and reviewing the package.json dependencies with npm audit before install. Because the metadata is inconsistent and this code can move funds, treat this as suspicious until you perform the above checks and validate all configuration and endpoints.