Sign in

How do you want to sign in?

This login is both a staff account and a client account. You can switch sides later from the profile menu.

Password reset

Email confirmation

New password

ArbBot

Telegram bot

One bot for the whole product. Create it in @BotFather and paste the token here.
The token is stored encrypted and is never shown again. Leave empty to keep the current one.

Outgoing email

The mailbox letters to clients are sent from: password resets, email confirmations and account security notices.
This is what the client sees in the From field. Most relays only accept an address of their own domain.
Port 465 — TLS right away; 587 or 25 — STARTTLS. There is no separate switch: the port decides.
The password is stored encrypted and is never shown again. Leave empty to keep the current one.

Delivery queue and failures

What is waiting to be sent in each channel, what failed in the last 24 hours, and how long the oldest notification has been waiting.
Channel Waiting Deferred Sending Failed, 24 h Oldest ready since

When Recipient Notification Attempts Error Actions

Notification log

Every notification: terminal events, account letters, broadcasts, the daily report. Open a report to see who got it and what failed.
When Notification Recipients Delivered Status Actions

Recipient Channel Status Attempts Error Sent Actions

Notification types and channels

Changes apply to the next notification right away. Password and email letters, terminal events and the test notification cannot be turned off as a type — their delivery is set per topic and channel below.

How long notifications are kept

The bell of the client's terminal keeps a notification for the hours below; older entries disappear within 5 minutes. The event log and delivery report for staff are kept for the days below. The bell cannot outlive the history.

Types

Notification Active

Topics × channels

«Always» — people cannot turn it off. «On / off by default» applies to people who have not chosen themselves. «Closed» means nobody gets it through this channel, even those who turned it on.

Notification texts

Pick a notification and a language. Variables in {{double braces}} are filled in when the notification is sent. Empty language — people get the English text.
{{button}} on its own paragraph becomes the button in the email; in the plain-text version the link itself stands there. The text must contain {{button}}.
Preview on made-up data — the link is fake.

        

Connected clients

Only these receive broadcasts. The bot cannot message anyone who has not pressed Start.
Client Telegram State News and offers Connected

New broadcast

Channels
News and offers go only to people who opted in. Service messages go to everyone, through every chosen channel they have.

Sent broadcasts

When Internal title Kind Status Delivered Actions

Recipient Channel Status Attempts Error Sent

Client requests

Everything clients write to us, in one place.
When Client Subject Status Photos

Request

Diagnostics

        

Sign-in email

SMTP is not configured — emails are not delivered.
Your sign-in email is changed by an administrator — contact support.
The new address gets a confirmation email.

Change password

All other sessions will be closed.
Clients
Period for PnL and partner profit
Click a header to sort (again — reverse). Partner profit is the sum of their shares from invoices issued in the period.
Applies to every client without their own mode. Boxes pick it up within one collector tick. A client with open positions keeps close-only access until flat.
Exchanges for all clients
A disabled exchange disappears from every client box: no cards, no spreads, no calls to its API. Boxes pick it up within one collector tick. Open positions on it are closed by the box and armed pendings removed; a naked leg the client closes by hand. A client can also have an exchange disabled just for them — on the client page, “Access” tab.

Payment details

The default wallet is where clients without their own address pay.
Used when a client has no own address. A client's own address is set by a superadmin on the client's «Invoices» tab.
Automatic payment reminders are off: their sender was removed together with the old subscription. The lead time and the texts below are kept but not used.

Recovery key

If you forget the phrase, boxes cannot be restored from a copy, and every client enters their exchange keys again.
The phrase seals every box's secrets. The panel keeps only a public key derived from it, so nothing stored on the panel can open a box.
Type the phrase once more from your record. Until it is verified, raising boxes on hosts stays off.
Only an unverified key that nothing is sealed with yet.

Change the phrase

Every box and every copy are resealed in one go. If even one does not open with the current phrase, nothing changes. After the change the new phrase has to be verified again.
A browser password manager may still offer to save these fields — decline: the phrase must not live in the browser.

Fleet health

One screen for “who is not working, and why”. Contact comes from the enforcement check the tick already sends every box, so showing this screen does not poll the boxes. It is kept in memory: right after a panel restart boxes show “no contact yet” until the first tick.

Host resources

Live load of the master and every fleet host while this screen is open. On hosts, the feed bot and every client box are shown separately; box CPU is in cores.
Host CPU Load 1/5/15 RAM Disk Network ↓/↑

Hosts

Dedicated hosts that run client boxes. Free places and IPs, the host's own feed bot and when the host last answered come from the panel; the boxes are asked about money only when you press «Money on the host».

Deploy

Restarts every client's box on the given image, one SSH per box. This is the biggest single action in the panel — it touches everyone's live trading bot at once.
Client Result Time

Clients

Client State No answer for Detail Actions
Period — invoices issued on these days (UTC)

New admin-panel user

Staff

Role and state change on a click on the value itself.
EmailRoleStateLast sign-inActions
Settings, status and announcements below are of this bot only. Disabling pairs and exchanges goes to every bot.

Feed status

Live counters from the bot itself. “healthy” only means its HTTP server answers — read the frames and clients below to tell whether the feed is actually flowing.
The bot restarts itself: it exits and systemd brings it back. The feed is down for a few seconds and every client reconnects.

Market feed (spread-finder)

—
These apply to the shared feed — every client at once.
Exchanges on the wire
Turning one off removes it from the feed within one frame; connections stay warm, so turning it back on costs nothing.

Disabled pairs

A pair listed here never enters the registry: it is not subscribed, not calculated and not shipped.

Exchanges disabled in the bot

The bot stops processing a disabled exchange and stops talking to it, live.

Announcements

Dates are usually parsed out of the announcement text, not published by the venue — so they can be wrong.
Effective Exchange Symbol Market Date from Announcement Actions

Restart required

Read-only here: changing these needs a restart of the bot.
SettingValue

Documentation

Instructions and notes for the team. Anyone on staff can read them; the superadmin writes and edits.

Audit log

WhenWhoFrom whereActionObject
Country is a guess from the IP address. IP Geolocation by DB-IP
Box logs
Logs are fetched from the box only by «Pull logs» — there is no background collection. «Follow» repeats it while this tab is open.

Restart the feed service?

This would interrupt the market feed for every client at once, and the bot would have to re-subscribe to all exchanges on the way back up.
The bot goes down for a few seconds, then systemd starts it again and it re-subscribes to all nine exchanges. Nothing else is lost: settings live in files, history in its own store.
Which bot to restart

Delete along with the financial history?

This client is not an empty record: there is money or trading history behind them. Deleting the row erases that history too — it is not moved anywhere and cannot be restored. TERMINATED keeps the record and the history; this does not.

Delete along with the database copies?

Update every client's box?

Every ACTIVE box gets a fresh pull and restart, one SSH connection at a time. A client whose bot is mid-restart will see the market feed drop for a few seconds; open positions are untouched — they live in the box's own database, not in the running process.

Mark the host DOWN?

DOWN is a note that the machine is dead: no new boxes go there. It stops nothing — the boxes on it keep running, if they still can.

Egress is still not from the client IP — the box stays in CLOSE_ONLY after this, until a probe sees the client IP.