Crypto Trading System Security & Stabilization
Budget: $10 – $30 USD
Crypto Trading Infrastructure – Security Hardening & Stabilization Project
Overview
I am looking for an experienced backend/security engineer to audit, stabilize, and secure an existing multi-service crypto trading infrastructure running on Linux VPS servers.
The system is already operational and consists of:
multiple Python trading bots,
Flask/FastAPI-style dashboards,
Binance Spot + Convert integrations,
SQLite databases,
systemd-managed services,
multi-port architecture.
The project has evolved over time and now requires:
security hardening,
infrastructure cleanup,
architectural improvements,
and long-term stabilization.
Recent Incident
A critical security incident recently occurred:
an external internet scanner discovered an exposed HTTP API endpoint,
the endpoint allowed emergency-close actions without authentication,
this triggered forced sell operations on live positions.
The vulnerable chain was:
Public dashboard port → internal localhost API → Binance execution.
Immediate fixes were applied:
authentication added,
localhost restrictions added,
firewall hardening completed,
endpoint audit performed.
However, I now want:
an independent technical review,
architecture redesign recommendations,
and long-term stabilization/security improvements.
Current Environment
Infrastructure
Linux VPS servers (Hetzner)
Multiple public ports/services
Python-based services
systemd
SQLite
Binance APIs
Spot + Convert logic
REST APIs
Dashboard interfaces
Main Concerns
Security hardening
Reverse proxy architecture
Authentication centralization
Public port exposure
API protection
Session management
Reliability
Error handling
Logging
Service isolation
Deployment consistency
What I Need
Phase 1 – Audit
Review all exposed ports/services
Identify security risks
Verify authentication coverage
Review API architecture
Review firewall rules
Review localhost trust assumptions
Review logging and monitoring
Phase 2 – Hardening
Central reverse proxy (Nginx or equivalent)
HTTPS setup
Single authentication layer
Internal-only service ports
Improved session/auth architecture
IP restrictions and/or VPN access
Rate limiting
Secure admin routing
Phase 3 – Stability
Review service startup issues
Debug unstable bot instances
Improve deployment consistency
Reduce maintenance complexity
Improve recovery procedures
Important Notes
This is NOT a greenfield project.
Existing codebase already works partially and must be stabilized carefully.
Experience with crypto trading systems is strongly preferred.
Security awareness is critical.
I prefer structured, documented changes rather than rapid untracked modifications.
Required Skills
Python
Linux server administration
Nginx / reverse proxy
API security
Flask/FastAPI
systemd
Firewall/UFW
Binance API experience
Debugging distributed services
Infrastructure hardening
Communication Expectations
I value:
transparency,
documented changes,
clear communication,
and approval before major production modifications.
Please describe:
your relevant experience,
similar infrastructure/security work,
and how you would approach hardening and stabilizing this type of system.
Overview
I am looking for an experienced backend/security engineer to audit, stabilize, and secure an existing multi-service crypto trading infrastructure running on Linux VPS servers.
The system is already operational and consists of:
multiple Python trading bots,
Flask/FastAPI-style dashboards,
Binance Spot + Convert integrations,
SQLite databases,
systemd-managed services,
multi-port architecture.
The project has evolved over time and now requires:
security hardening,
infrastructure cleanup,
architectural improvements,
and long-term stabilization.
Recent Incident
A critical security incident recently occurred:
an external internet scanner discovered an exposed HTTP API endpoint,
the endpoint allowed emergency-close actions without authentication,
this triggered forced sell operations on live positions.
The vulnerable chain was:
Public dashboard port → internal localhost API → Binance execution.
Immediate fixes were applied:
authentication added,
localhost restrictions added,
firewall hardening completed,
endpoint audit performed.
However, I now want:
an independent technical review,
architecture redesign recommendations,
and long-term stabilization/security improvements.
Current Environment
Infrastructure
Linux VPS servers (Hetzner)
Multiple public ports/services
Python-based services
systemd
SQLite
Binance APIs
Spot + Convert logic
REST APIs
Dashboard interfaces
Main Concerns
Security hardening
Reverse proxy architecture
Authentication centralization
Public port exposure
API protection
Session management
Reliability
Error handling
Logging
Service isolation
Deployment consistency
What I Need
Phase 1 – Audit
Review all exposed ports/services
Identify security risks
Verify authentication coverage
Review API architecture
Review firewall rules
Review localhost trust assumptions
Review logging and monitoring
Phase 2 – Hardening
Central reverse proxy (Nginx or equivalent)
HTTPS setup
Single authentication layer
Internal-only service ports
Improved session/auth architecture
IP restrictions and/or VPN access
Rate limiting
Secure admin routing
Phase 3 – Stability
Review service startup issues
Debug unstable bot instances
Improve deployment consistency
Reduce maintenance complexity
Improve recovery procedures
Important Notes
This is NOT a greenfield project.
Existing codebase already works partially and must be stabilized carefully.
Experience with crypto trading systems is strongly preferred.
Security awareness is critical.
I prefer structured, documented changes rather than rapid untracked modifications.
Required Skills
Python
Linux server administration
Nginx / reverse proxy
API security
Flask/FastAPI
systemd
Firewall/UFW
Binance API experience
Debugging distributed services
Infrastructure hardening
Communication Expectations
I value:
transparency,
documented changes,
clear communication,
and approval before major production modifications.
Please describe:
your relevant experience,
similar infrastructure/security work,
and how you would approach hardening and stabilizing this type of system.