
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
coin-allocator
Advanced tools
Tool to automatically rebalance various cryptoins via the cryptsy API
Taking the lessons from The Intelligent Asset Allocator and applying them to Bitcoin and friends via Cryptsy.
Takes your target allocation and your current balances and suggests a set of trades to rebalance while optimizing for lowest fees and number of trades. Then, optionally, executes those trades for you.
This software is in alpha stage. It is incomplete and almost guaranteed to have bugs. Using it may cause you to loose money or experience other issues. You have been warned.
To run your own copy, first download and install Node.js, then install Coin Allocator with this command:
npm install -g coin-allocator
If you don't already have a Cryptsy account, please use this link* to sign up: https://www.cryptsy.com/users/register?refid=154285
Optional: If already signed up for Cryptsy but would still like to give me credit*, you may enter the following trade key in the "I was referred by" section of the dashboard: 93c94927ce29eebbb9f6aa6db5ca3fb6f164e97e
Make sure you have some coins in your Cryptsy account. You can purchase them with USD on Cryptsy (requires verification), or acquire them elsewhere and transfer them in.
Turn on the API for your Cryptsy account and grab your public and private keys.
Optional: Set your CRYPTSY_PUBLIC_KEY
and CRYPTSY_PRIVATE_KEY
environment variables to the appropriate values
Run coin-allocator
with your desired allocation. For example, this would give a 60/40 BTC/LTC split: coin-allocator --allocation.BTC 60 --allocation.LTC 40 --public-key a1b2c3... --private-key d1e2f3...
(Omit the keys if your already stored them in environment variables.)
That's it! It should read your account balances and the current market rates and suggest a set of trades to re-balance your account. You will then have to type 'yes' for it to execute the suggested trades.
Tips:
--yes
argument to make it automatically execute the trades with out asking for confirmation.Control-c
. If there are trades open, it will attempt to cancel them.require()
'd by other Node.js code so you can build your own applications on top of it. I will document the API once it settles down a bit, and probably build a web site around the library eventually....heroku.sh
to have your desired allocation and then up an instance on Heroku and then have the Scheduler add-on run ./heroku.sh
every so often.* Note: Links here are referral links. If you use my referral link for cryptsy.com, I will get a commission that is equivalent to about 0.000001% of your trade volume. (0.2% to 0.3% trade fee * 0.1% in Cryptsy Points * Cryptsy Point / BTC exchange rate - 0.00088743 at the time of writing.) This comes out of Cryptsy's fee and does not affect your account in any way.
--compute-gains
when trade history includes currencies that you are not currently using and/or are not currently available on the market.Notes for arbitrary trade paths:
Step 1 details: get value: find best trade path, return ratio without fees. (memoize?)
Step 3 details: find best trade path: recursive function: given, destination, list of letters path so far (starting with source), max length. if last item = destination, return list. if list length = max length, return false. results set = for each currency that can be traded to from the last one in the list (excluding the one before it), call function with list + that cur filter results set to remove falses if empty, return false sort by trade ratio (with fees) return highest ratio trade path top-level: if false, throw. otherwise return path memoise.
todo:
FAQs
Tool to automatically rebalance various cryptoins via the cryptsy API
We found that coin-allocator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.