Copy Bots Flood GitHub; One Rust System Stands Out
A wave of near-identical copy-trading bots hit GitHub this week, raising red flags about credential harvesting and malware distribution. Amid the noise, a handful of legitimate projects signal where serious operators are focusing their edge.
GitHub Bot Landscape — 2026-06-14
Volume Spike, Mostly Noise
Today's GitHub sweep returned 19+ Polymarket-tagged repositories, the highest single-day count in recent weeks. The surge is largely synthetic. At least six repos — from accounts like `kalliimmunosuppressive504`, `pilulariatwo764`, `Amoralismelectronictext609`, and `Philsober337` — share nearly identical file sizes (~460–490KB), identical descriptions with minor wording swaps, and were all created within a 72-hour window in late May. This is a textbook sybil-seeding pattern. These repos are not independent projects. They are almost certainly forks of a single payload dressed in fresh usernames.
**Security alert: do not clone, run, or inspect these repos in an unsandboxed environment.** The combination of TypeScript execution, CLOB API credential prompts, and interval polling is a well-documented vector for private key exfiltration. Treat all six as hostile until proven otherwise.
---
Repos Worth Watching
**`mbordash/DRADIS`** (12 stars, 1 fork) is the most technically credible new entry this cycle. Written in Rust for low-latency execution, it bundles seven autonomous strategies — Momentum, Market Making, Arbitrage, Time Decay, Basis Trading, ML-driven, and Trend-following — into a single system with a Next.js control dashboard and LLM advisor via Ollama. The Telegram integration and OpenClaw hooks suggest this is being run live, not just prototyped. Rust on Polymarket's CLOB is still rare enough that this repo deserves a closer read. Watch the fork count over the next two weeks as a signal of adoption.
**`braedonsaunders/homerun`** (92 stars, 20 forks) continues to accumulate traction as the leading open-source framework for multi-platform strategy development across both Polymarket and Kalshi. The 25+ built-in strategies, native backtesting, and one-click setup make it the default entry point for semi-serious operators. Its cross-platform arbitrage capability — particularly BTC 15-minute markets on both venues — is directly relevant given today's separately appearing `Juanp2389/Kalshi-trade-bot`, which targets exactly that spread.
**`matthewnyc2/arbitrage`** (1 star) is a quiet outlier. A production-grade Python asyncio scanner for NegRisk multi-outcome arbitrage with 60 passing tests and a paper-trading mode is not the work of a casual builder. NegRisk arb on Polymarket remains undercrowded relative to binary markets. This repo signals at least one operator is systematically hunting it.
**`quipmnxailcrrgky/tradingbot`** (98 stars, 60 forks) and **`bit-nexusxtitmtdsuy/Polymarket_Bot`** (32 stars, 17 forks) both carry the high-star, randomized-username signature associated with astroturfed repos designed to appear credible. Exercise the same caution as with the copy-trading cluster.
---
Strategy Signals
Three themes dominate today's repo set:
1. **Cross-platform BTC 15-minute arbitrage** (Polymarket vs. Kalshi) is clearly attracting dedicated tooling. The price gap window on these markets is narrow but consistent around major macro announcements. Two separate repos targeting this specific structure in one day is a signal, not a coincidence.
2. **Whale copy-trading via CLOB** is being productized at the retail level. The proliferation of these bots — malicious or otherwise — means any alpha from following large wallets is being compressed rapidly. If you are running a copy-trading strategy, assume your edge window is shortening.
3. **NegRisk multi-outcome markets** remain the least-tooled, highest-potential surface on Polymarket right now. `matthewnyc2/arbitrage` is one of very few public projects targeting it systematically.
---
Bottom Line
Strip out the sybil noise and today's feed contains three actionable data points: Rust-based low-latency infrastructure is arriving on Polymarket, cross-venue BTC arb is being commoditized, and NegRisk arbitrage is still open territory. Operators building there now are ahead of the tooling curve.