
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Test automated trades between multiple chains on Mach.
Test automated trades on Mach. Specify a start chain and symbol, and a destination policy determining how the destination token will be chosen. In each trade, the test wallet's entire balance of the source token will be sold for the destination token, and then the destination token becomes the new source token for the next trade. This continues until the script is killed by the user, or there are no more tokens yielded by the destination policy.
Install
# If using pip
python -m pip install mach-cctt
# If using uv
uv pip install mach-cctt
Usage
cctt --help
Example
# The script will create log files. Recommended to create a directory for it.
mkdir cctt/ && cd cctt/
# Fill in this config file according to the template. Make sure you fill in the accounts section with your private keys.
touch config.yaml
export CONFIG_PATH=config.yaml
# Show balances of all your accounts
cctt balances
# Test trading USDC between random chains, starting from Optimism-USDC
cctt run --source Optimism-USDC --destination-policy fixed:USDC
# Test trading USDC on only Arbitrum and Optimism, but fund the test by selling your Polygon-USDC balance
cctt run --source Polygon-USDC --destination-policy cheap:USDC
# Trade between random tokens on random chains, starting from Arbitrum-USDT
cctt run --source Arbitrum-USDT --destination-policy random
# If the --source is made explicitly empty, then whatever token has the highest value balance in your accounts is automatically chosen as the source
cctt run --destination-policy random
# Once you're done, you can set withdrawal addresses in the config file and withdraw the funds from the test accounts into the withdraw addresses. Note that gas is not withdrawn.
cctt withdraw
Notes:
CLI Flag | Example | Name in Code | Description |
---|---|---|---|
--destination fixed:<SYMBOL> | --destination fixed:USDC | RandomChainFixedSymbolPolicy | Trade the token with symbol <SYMBOL> on random chains in a random order |
--destination cheap:<SYMBOL> | --destination cheap:WETH | CheapChainFixedSymbolPolicy | Trade the token with symbol <SYMBOL> on only chains with "cheap" gas. Currently hardcoded to only Arbitrum and Optimism. |
--destination random | --destination random | RandomTokenPolicy | Trade completely random tokens in a random order |
N/A | N/A | TokenIteratorPolicy | Takes a sequence of tokens and trades exactly those tokens in that order |
--destination chains:<CHAINS> | --destination chains:Arbitrum,Optimism,Base,Solana | SingleChainPolicy | Trades all tokens in the given list of chains <CHAINS> . Trades all tokens on one chain in a random order, and trades between chains in a random order. Used to test single-chain trades. |
FAQs
Test automated trades on the Mach exchange.
We found that mach_cctt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.