MATCH web3anand/polyfieldapp — This repository contains real, hardcoded Polymarket CLOB API credentials (api_key, secret, and passphrase) committed directly in the QUICK_VPS_DEPLOY.md documentation file.
MATCH jason-czar/PolyCzarv2 — Repository contains hardcoded Polymarket CLOB API credentials (api_key, api_secret, api_passphrase) as fallback values in the PolymarketService.js constructor.
MATCH vmbbz/betmirror — This Polymarket copy-trading bot has hardcoded real credentials as fallback defaults: a MongoDB Atlas connection string with username/password, a Solana QuikNode RPC URL with API key, and a MongoDB encryption key used to encrypt trading wallet private keys.
MATCH ic-nightfury/shock-and-fade — This repository contains what appear to be real Polymarket CLOB API credentials hardcoded in a reference documentation file, including a specific API key, secret, and passphrase.
MATCH duccanh-he181774/Tracking-Polymarket-Change — Repository contains a hardcoded Ethereum private key and proxy credentials in generate_api_key.py, used to generate Polymarket CLOB API credentials.
MAYBE LvcidPsyche/polymarket-arbitrage-bot — Repository contains hardcoded Ethereum/Polygon private key, wallet address, and seed phrase in autonomous_trader.js for a Polymarket arbitrage bot.
MAYBE DGator86/Polymarket-Super-Bot — The repository contains a hardcoded Ethereum private key in configure_bot.sh used for Polymarket trading, though it's unclear if it's a real funded key or a dummy example.