LEEF Trader

Official site: https://leeftoken.io. Official GitHub: https://github.com/leeftoken (this repo is https://github.com/leeftoken/leef-trader).

A WAX-native trading terminal and automated trading engine for the LEEF ecosystem, executing on Alcor's concentrated-liquidity AMM. Browser-based, non-custodial: keys never leave the tab. The site loads once — a persistent market engine (block heartbeat, health-scored RPC failover, on-chain pool state) keeps prices, routes, balances and strategies updating continuously with no page refresh and no key re-import.

What it does

• Terminal: live LEEF pool book (Alcor API pulls + direct swap.alcor table reads between them), ranked routes, tape of recent fills, pool analytics, LP management, token universe.
• Infrastructure: a health-scored pool of 8 WAX RPC nodes + 5 Hyperion history nodes with automatic failover, cooldown/restore, block-lag rejection and runtime endpoint configuration — plus a live infrastructure status desk. See MARKET ENGINE.
• Manual trading: Buy Now / Sell Now pick the best executable route for that exact size across Alcor, Defibox, and TacoSwap (direct, multi-hop, or split) — paper by default, live when a wallet/session key is connected. See ROUTING and VENUES.
• Automated bot: signal, mean reversion, spread arb, grid, DCA, volume maker, plus Treasure growth — name 1–5 assets to accumulate; the bot maximizes those token counts without destroying portfolio value, and HOLDs (with a why) when the book does not offer enough expected growth.
• Rebalancer: priority-ladder portfolio sweeps (dust consolidation + drift repair) as one atomic WAX transaction.
• Economic discipline: every entry is sized and gated by a central cost model and net-edge engine — see below.
• Evidence journal: every decision, exact-quote gate verdict, execution and predicted-vs-realized edge persists in a compact append-only IndexedDB journal, aggregated on the Evidence desk and exportable as NDJSON. The trader no longer forgets what it learned on reload. See EVIDENCE.
• Platform fee: 0.001% of every successful trade's guaranteed output to smart.ass — one transfer inside the same atomic transaction (reverted trades pay nothing), precision-floored, fee-aware economics before any gate approves. See PLATFORM FEE.

The economic core (what makes it a trading system, not a script)

Every bot entry flows through:

strategy signal
  → NetEdgeEngine        expected gross move − ALL modeled costs
  → optimal size scan    profit-maximizing size ≤ risk cap (often smaller!)
  → opportunity score    explainable 0–100 (edge × execution × liquidity
                         × confidence × freshness)
  → risk engine          impact cap, position cap, cooldown, hourly cap,
                         staleness gate, WAX CPU/NET/RAM preflight
  → execution policy     transaction policy firewall (allowlisted
                         contracts/actions/tokens/receivers)
  → Alcor CLMM router    fresh exact quote, min-out enforced on-chain
  → sign + broadcast     session key (in-memory) or WCW/Anchor —
                         ONE submission; a timeout locks capital as
                         UNKNOWN with the known txid, never a duplicate
  → reconcile            actual transfers read back from the chain —
                         positions and P&L settle from chain truth
  → calibration          predicted vs realized edge recorded per strategy

If no trade clears the required net edge after costs, the bot does nothing. Doing nothing is a successful decision.

See docs/ for the full documentation set — start with ARCHITECTURE, MARKET ENGINE, TRADING ENGINE and NET EDGE.

Develop

npm ci          # install (or: npm install)
npm run dev     # Vite dev server
npm test        # typecheck + eslint + vitest + build
npm run build   # production build

No environment variables are required — the app is fully client-side and talks to public WAX RPC / Hyperion / Alcor endpoints. See CONFIGURATION for every runtime knob.

Deploy

The app is a static SPA and deploys to Vercel in one step: import the repo, Vercel auto-detects Vite, and vercel.json already contains the SPA rewrite and asset caching rules. No environment variables needed. Full instructions, previews, and rollback: DEPLOYMENT.

Security model (read before live trading)

• Session keys (WIF/PVT_K1) live in memory only — never persisted, never transmitted. Closing or refreshing the tab forgets the key.
• Every transaction passes a policy firewall before any signer sees it: only allowlisted contracts, actions, token contract+symbol+precision, and receiver = your account at swap.alcor. Anything else is rejected.
• Atomic arbitrage enforces its profit floor on-chain: the sell legs' min-outs must sum to at least stake × (1 + floor) or nothing is signed.
• Prefer a dedicated trading permission with limited funds over your main account's owner key. Never import an owner key.

Full details in SECURITY.

Honest limitations

• AI integration: analyst only. An optional LLM desk (via your own Cloudflare gateway — see AI) can comment on the market, the strategy config and the evidence journal. It is never on the trade path: no signing, no gate input, and the gateway forces trade_authorization: false. All trading decisions remain deterministic.
• Backtester: PLANNED. Strategy calibration currently learns from live / paper results only (predicted-vs-realized edge memory).
• Paper fills use the same route math but do not simulate partial fills, competing flow, or confirmation latency.
• The app is a browser tab: automation runs while the tab is open. There is no server-side 24/7 daemon (PLANNED as an optional worker; keys would stay client-side or in a user-controlled vault — never in frontend env vars).
• The Nostr login/shell is template heritage and not required for trading.

License

See repository. Trade at your own risk — this software optimizes for positive expected value under explicit costs and limits; it cannot and does not promise profit.

---

Vibed with Shakespeare