| name | aster-deposit-fund |
| description | Deposit funds to Aster from a wallet; private key from env. Use when the user wants to deposit to Aster or fund an Aster account. |
Aster Deposit Fund
Env
| Var | Required | Description |
|---|
ASTER_DEPOSIT_PRIVATE_KEY | Yes (deposit) | Wallet private key (0x + 64 hex). Used to sign on-chain deposit txs. Never log or echo. |
ASTER_WALLET_ADDRESS | Yes (balance) | Public wallet address. Used by balance.mjs for read-only queries. |
ETH_RPC_URL | Recommended | Private Ethereum RPC (Alchemy, Infura). Public fallback used if unset. |
BSC_RPC_URL | Recommended | Private BSC RPC. |
ARBITRUM_RPC_URL | Recommended | Private Arbitrum RPC. |
Supported chains
| Chain | chainId |
|---|
| ETH (Ethereum) | 1 |
| BSC | 56 |
| Arbitrum | 42161 |
User confirmation
MANDATORY — Before executing ANY deposit transaction, the agent MUST:
- Display a clear summary to the user:
- Chain and chainId
- Asset symbol and contract address (for ERC20)
- Amount (human-readable AND raw wei/units)
- Deposit (treasury) address
- Broker ID (if non-default)
- Estimated gas cost
- Ask for explicit textual confirmation (e.g. "Type 'confirm' to proceed" or "yes/no").
- Do NOT assume consent from a prior message, implicit agreement, or context.
- Do NOT batch multiple deposits without individual confirmation for each.
- If the user cancels or does not confirm, abort immediately with no on-chain action.
Failure to confirm is a critical safety violation in an autonomous agent context.
Flow
- Deposit address — Hardcoded per chain in
scripts/common.mjs (SEC-01). Same address for native and ERC20 on that chain.
- Balance check — Verify the wallet has sufficient balance for the deposit amount + gas BEFORE submitting any transaction (SEC-06).
- User confirmation — See above. Always confirm before executing.
- On-chain send — From wallet (key from env), sign with appropriate RPC for chain:
- Native:
treasury.depositNative(broker) with value = amount (wei).
- ERC20:
token.approve(treasury, amount) then treasury.deposit(token, amount, broker). Token metadata (contract + decimals) is provided explicitly (no API lookup).
- All transactions use an explicit gas limit (SEC-09) and wait for multiple confirmations per chain (SEC-10).
Security
- Private key only from env; never log, echo, or pass via CLI args.
- Key is validated (0x + 64 hex chars) and removed from
process.env after account derivation (SEC-02).
- Error output is sanitized to prevent accidental key leakage in logs (SEC-02).
- Deposit address is checked against a hardcoded whitelist to prevent oracle attacks (SEC-01).
- Public RPCs emit a warning; use private RPCs (Alchemy, Infura) in production (SEC-04).
balance.mjs never loads the private key; it uses the public address only (SEC-07).
Broker ID
The --broker parameter (default: 1) identifies the Aster broker account that the deposit is attributed to. Broker 1 is the primary/default Aster broker. Only change this if you know the target broker ID. An incorrect broker ID may result in funds being inaccessible from the expected account (SEC-11).
Scripts (viem)
Optional: scripts/ — Bun + viem. Install: cd skills/aster-deposit-fund/scripts && bun install.
| Script | Purpose |
|---|
deposit.mjs | Deposit (no API lookups): ASTER_DEPOSIT_PRIVATE_KEY=0x... bun run deposit.mjs --chain <eth|bsc|arbitrum> --native --amount <amount> [--broker <id>] [--dry-run] or ... --token <0x...> --decimals <n> [--symbol <SYM>] --amount <amount> ... |
balance.mjs | Wallet balances (read-only, offline): bun run balance.mjs --chain <eth|bsc|arbitrum> --address <0x...> [--no-native] [--token <SYM:0xADDR:DECIMALS>]... |
See .env.example in the repo root for all env vars.
Payload shapes: reference.md.
