Carbium — Solana DeFi Infrastructure

• Analyzed: May 16, 2026, 4:44 AM
• Findings: 1
• Version: 1.0.3
• Hash: b0872b1c1942e27f7d06425c3cd07df8e04abd4c1f68ba7dae4e4646ff13c19c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The Carbium skill bundle provides a comprehensive set of tools and documentation for interacting with Solana infrastructure, including RPC, gRPC, and Swap APIs. The code and instructions (SKILL.md, templates/carbium-setup.ts) follow standard Solana development patterns, such as using environment variables for API keys and implementing exponential backoff for retries. While it includes high-risk trading examples like pump.fun sniping (examples/pump-snipe/README.md), the logic uses legitimate program IDs and follows documented protocols without evidence of malicious intent, data exfiltration, or unauthorized execution. All network calls are directed to the service's official domains (carbium.io).