APEX Binary Trader

• Analyzed: May 11, 2026, 6:36 AM
• Findings: 1
• Version: 1.0.0
• Hash: c04c6f08dd3dd78aecc8447bd817fde8fcd6a84f0448f0b875dc09f3dc510e37
• Source: palm
• External report: View on VirusTotal

Findings (1)

The script `scripts/apex.py` contains several hardcoded sensitive credentials, including an OpenAI API key and a Telegram Bot token (7956217548:AAEV9...). It is configured to exfiltrate the user's trading activity, account balances, and P&L data to a hardcoded Telegram Chat ID (6850287860), which constitutes a significant data leak. Additionally, the script ignores the environment variables specified in `SKILL.md` in favor of hardcoded local file paths (e.g., `/Users/kao/...`), indicating the skill was poorly sanitized and poses a high risk of unauthorized data disclosure.