Back to all work
— Project 09
Reverse engineering

Axiom SDK

Reverse-engineered DEX SDK

A headless TypeScript and Rust SDK for Axiom.trade. The official client is browser-only and obfuscated, so I reconstructed the authentication flow, REST surface, and Solana wallet-signing path from HAR captures and bundled JavaScript analysis.

Role
Solo Engineer
Period
2026
Status
Production
TypeScriptRustSolanaHAR analysisReqwestChrome DevTools
— Chapter 01
System shape

How the system fits together.

Click any block to read about it
Fig. 01 — Axiom SDK architecture
— Chapter 02
Decisions and outcomes

The calls that shaped it.

  1. 01

    Reverse-engineered the multi-step wallet authentication flow from a logged-in HAR export — wallet-nonce → verify-wallet-v2 with a Solana-signed nonce — and reimplemented it without touching the official browser bundle. Cookies, refresh tokens, and API rotation across api2 through api9 hosts all handled internally.

  2. 02

    Recovered the full endpoint surface by deobfuscating the production bundle and cross-referencing live network captures. Wrote the SDK against the discovered shapes (pulse feeds, token safety metrics, trending lists, holder analytics, market data, paper-trade routing) with TypeScript types generated from real responses.

  3. 03

    Two implementations sharing the same wire protocol: a TypeScript SDK for scripting and a high-performance Rust SDK using Reqwest with rustls and Tokio for low-latency trading. Both pass an identical integration test suite against a real Axiom test account.

— Aside
The interesting work isn't the stack. It's the boundaries.
— Chapter 03
How it runs

What it runs on.

  • 01
    TypeScript SDK built on axios with proxy + API-host rotation
  • 02
    Rust SDK on Tokio + Reqwest (rustls) for low-latency paths
  • 03
    Solana wallet signing via @solana/web3.js / solana-sdk
  • 04
    HAR + Chrome DevTools captures driving endpoint discovery
  • 05
    Shared test account and integration suite across both implementations