fourtrader-mcp

The trading functions ('buy_token' and 'sell_token') have a critical security vulnerability: 'minTokensOut' and 'minBnbOut' are hardcoded to 0. This means transactions are executed without any slippage protection, exposing user funds to potential 100% loss due to price fluctuations or malicious actors. Additionally, 'poolAddress' in 'buy_token' is hardcoded, which might not be universally correct or robust. While private keys and API keys are correctly managed via environment variables and security documentation is present, the fundamental lack of slippage control makes the trading aspect highly unsafe.