Rate limits and body caps on trading webhooks
2026-08-27 · VireA shared secret stops strangers who do not know the secret. It does not stop a buggy alerter that retries 200 times, or a client that posts a 20MB JSON blob “with context.”
Put boring guards at the edge
- Per-IP and per-route rate limits on the webhook path
- Hard request body size cap
- Fast reject path that never touches the executor
- Audit lines for accepted vs rejected without logging secrets
What good looks like in dry-run
Flood the endpoint with bad sizes and wrong secrets. Confirm the process stays up, the venue is untouched, and logs stay readable.
Launch installs include these guards by default. They are not optional polish.