
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
A Unofficial Python3 library to interact with FTX's API. The library can be used to fetch market data, make trades, place orders or create third-party clients.
For more information, see the FTX documentation.
$ pip install ftx
This is an introduction on how to get started with FTX client. First, make sure the FTX library is installed.
The next thing you need to do is import the library and get an instance of the client:
import ftx
client = ftx.FtxClient()
Get the orderbook levels of bid/ask:
>>> import ftx
>>> client = ftx.FtxClient()
>>> result = client.get_orderbook('BTC/USD', 1)
>>> result
{'asks': [[11861.0, 1.778]], 'bids': [[11860.5, 0.1]]}
>>> result['asks']
[[11861.0, 1.778]]
>>> result['bids']
[[11860.5, 0.1]]
The API supports fetching full data for one or multiple markets.
>>> client.get_market('BTC/USD')
{'ask': 11849.0, 'baseCurrency': 'BTC', 'bid': 11848.5, 'change1h': 0.00025325004220834034, 'change24h': 0.008983693106825051, 'changeBod': 0.006925855109411514, 'enabled': True, 'last': 11849.0, 'minProvideSize': 0.0001, 'name': 'BTC/USD', 'postOnly': False, 'price': 11849.0, 'priceIncrement': 0.5, 'quoteCurrency': 'USD', 'quoteVolume24h': 9271567.5201, 'restricted': False, 'sizeIncrement': 0.0001, 'type': 'spot', 'underlying': None, 'volumeUsd24h': 9271567.5201}
Any time-based parameters accept Python datetime
objects. All timestamps returned from FTX are UTC.
>>> client = ftx.FtxClient()
>>> client.get_trades('BTC/USD', 1, datetime.datetime(2020,8,20).timestamp())
[{'id': 88953674, 'liquidation': False, 'price': 11861.0, 'side': 'sell', 'size': 0.0105, 'time': '2020-08-20T17:33:19.115690+00:00'}]
Private endpoints require authentication. Clients authenticate with an API key. For more information, see:API keys
To get an authenticated client instance:
>>> client = ftx.FtxClient(api_key=<YOUR API KEY>, api_secret=<YOUR API SECRET>)
If you try to access a private endpoint with an unauthenticated client, an error is raised. Calls to private endpoints work the same as regular ones:
client.get_open_orders('BTC/USD')
An order can be placed through the place_order()
function. See
the API Documentation for required and optional parameters.
client.place_order('BTC/USD', 'sell', 12345.0, 10)
Orders can be modified by providing the original order ID.
>>> client.place_order('BTC/USD', 'sell', 12345.0, 10)
{"createdAt": "2020-08-20T17:33:19.115690+00:00","filledSize": 0,"id": 9596912,"market": "BTC/USD"...
>>> client.modify_order(9596912, 12500.0, 15).result()
An order can be canceled given the order ID:
client.cancel_order(9596912).result()
FAQs
Unofficial python3 FTX exchange API 1.2.0
We found that ftx demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.