About this project

FlashLoanArbitrage is a JavaScript command-line tool distributed as a single script, `goflash.js`, plus a `package.json`. Its README presents it as an arbitrage bot for DeFi that monitors ETH/USDC pricing and acts when a spread appears between venues. How it is described as working The README says the bot polls ETH/USDC prices on five sources: Chainlink (used as the base oracle price), Uniswap V2, SushiSwap, Curve Finance and Balancer. It compares the values, displays them with up/down/flat indicators, and waits for a maximum price difference of at least 0.9% before attempting a trade. Scanning is described as recurring every 60 seconds. Execution is said to rely on a deployed smart contract that takes a flash loan in USDC, buys ETH on the cheaper venue, sells on the more expensive one, repays the loan with fees and gas, and converts residual USDC profit back to ETH. Four flash-loan sources are listed with their stated fee tiers and claimed liquidity ceilings: Aave (0.05%, up to 10,000,000 USDC), dYdX (0.05%, up to 500,000 USDC), Uniswap V3 (0.01%, up to 5,000,000 USDC) and Balancer (0.02%, up to 1,000,000 USDC). Note that the repository structure shown in the README contains only the script, the manifest, an auto-generated `wallet.json` and the README itself; no contract source is listed. Usage Installation follows the usual Node.js flow: obtain `goflash.js` and `package.json`, run `npm install`, then `node goflash.js`. On first launch the tool presents an interactive prompt offering to create a new wallet or import an existing one by private key; the key is stored in `wallet.json`. A menu then exposes options to pick a flash-loan protocol, set a loan amount in ETH, recreate or re-import the wallet, start arbitrage, or exit. Dependencies are `ethers` ^6.11.1, `inquirer` ^8.2.6 and `chalk` ^4.1.2. Stated constraints and caveats The README warns that a wallet balance below 0.1 ETH may not cover gas for loans above 10 ETH, and it lists fees it says are deducted: a 0.1% trading fee, 0.05% slippage and gas. It also states that a 0.9% cross-venue spread is rare in real markets and that the script will occasionally display a simulated opportunity for demonstration. A troubleshooting section covers module-format errors, malformed private keys, insufficient funds and RPC reconnection. Risk and security notes Three aspects deserve attention before running anything like this. First, the tool asks for a raw private key and persists it in plaintext in `wallet.json`; the README itself advises against committing that file, using a dedicated wallet and keeping offline backups, which indicates the design assumes a hot wallet holding gas funds. Second, the project is offered "as-is for educational purposes" with no performance data, no audited contract and no evidence that the claimed arbitrage margins are achievable net of fees, slippage and competition from faster searchers. Third, arbitrage and flash-loan bots are a common vehicle for deceptive repositories, so any binary, contract address or download link associated with such a project should be treated as untrusted and independently verified before funds are exposed to it. This overview describes what the README claims; it does not confirm that the strategy is profitable or that the code behaves as documented.