Setup

April 17, 2026 · View on GitHub

Every module in this toolkit is standalone, but they all read the same project-root .env. Get it right once and every module works.

1. Clone

git clone https://github.com/cryptomotifs/cipher-solana-bot-toolkit
cd cipher-solana-bot-toolkit
cp .env.example .env

2. Get a Solana RPC

The public mainnet RPC (https://api.mainnet-beta.solana.com) works but is rate-limited. For real use, pick one:

Set RPC_URL and (optionally) RPC_ENDPOINTS (comma-separated for round-robin).

3. Set up a wallet

NEVER put a real private key into a committed file. Use one of:

Encrypt your base58 secret with any AES-256-GCM tool. Put the encrypted file at keys/trading.enc and set:

WALLET_KEYFILE=keys/trading.enc
WALLET_PASSWORD=<your-decrypt-password>

Option B — plain JSON keypair (dev only)

solana-keygen new -o keys/id.json

Set WALLET_PATH=keys/id.json. This is the same format solana-keygen writes by default.

Option C — base58 env var (quick start)

PRIVATE_KEY=<YOUR_BASE58_SECRET>

Fine for dry-run/testing. For live trading, prefer Option A.

4. Fund the wallet

Start with 0.1 SOL for gas + small trades. Do NOT use a wallet that holds your main balance.

Security pattern: see SECURITY.md for the 3-tier hot/warm/cold wallet split.

5. Per-module setup

Each module's README.md lists its specific deps and commands:

  • src/flashloan/README.md — Python, pip install ...
  • src/volume-bot/README.md — Node, npm install
  • src/arb-mev/README.md — Rust, cargo build --release
  • src/memecoin-launcher/README.md — Rust, cargo build --release
  • src/copy-trade/README.md — Python, pip install ...

6. (optional) CI

A ready-made GitHub Actions workflow (Python + Node + Rust smoke build + secret scan) is shipped at docs/ci-recipe.yml. To enable it:

mkdir -p .github/workflows
cp docs/ci-recipe.yml .github/workflows/ci.yml
git add .github/workflows/ci.yml
git commit -m "ci: enable smoke + secret-scan workflow"
git push

(The recipe lives in docs/ rather than .github/workflows/ so that cloning/forking doesn't silently enable CI you didn't ask for, and so that tokens without workflow scope can still push.)

7. Dry run everything first

All modules support DRY_RUN=true. Don't skip this. Watch the logs for at least a few hours, confirm the math matches your expectations, then flip to live with small caps.