
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@stove-labs/arbitrage-bot-swap-execution
Advanced tools
Swap execution plugin to execute swaps on exchanges
This repository is related to the core library of the arbitrage bot.
The swap execution plugin is responsible to group swaps transactions and token approvals wherever possible in batches. For example in Tezos, when operations are grouped with the batch
call, they are executed atomically
. That means that if one operation fails, the whole stack fails and reverts. This is especially handy for arbitrage done completely on Tezos, because it poses a risk free approach if the net profit condition is not met.
We use the TypeScript/JavaScript SDK @taquito/taquito
to interact with the Tezos node.
// this is a typical batch operation if arbitrage is done between 2 DEXs on Tezos
const batchParameters = [
xtzToTokenExchange1, // swap 1
approveTokenSpendingExchange2,
tokenToXtzExchange2, // swap 2
revokeTokenSpendingExchange2
]
// src/swapExecution.ts
// retrieve all operation parameters and save in the batchParameters array
for await (const operationParameters of swaps.map((swap) =>
this.getExchangePluginBySwap(swap).forgeOperation(
swap,
botAddress
)
)) {
batchParameters = [...batchParameters, ...operationParameters];
}
⚠️ It is important to note that arbitrage is a competitive field and many other bots could go for the same arbitrage opportunity. The node operator (usually) orders operations by baker fee. However, for batch operations only the operation fee of the first operation is taken into account. That's why the totalEstOpCost * multiplier
is applied to the first operation only of the batch. Leaving the fee for all the other operations would be a waste.
// src/handleTezosSwapExecution.ts
// estimate operation cost for the batch operation
const estimates = await tezos.estimate.batch(batchParameters);
const totalEstOpCost = estimates.reduce(
(sum, current) => sum + current.suggestedFeeMutez,
0
);
let multiplier = ecosystemKey.multiplier || 1;
// increase operation cost/fee if necessary to stay competitive in regards to other swaps in the block
// (inflated) fee is only applied to the first operation in the batch!
batchParameters[0].fee = new BigNumber(totalEstOpCost * multiplier)
.integerValue()
.toNumber();
FAQs
Swap execution plugin to execute swaps on exchanges
We found that @stove-labs/arbitrage-bot-swap-execution demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.