סקירה כללית
SLH Spark הוא אקוסיסטם דיגיטלי ישראלי המבוסס על 25+ בוטי טלגרם, FastAPI backend על Railway, PostgreSQL + Redis, GitHub Pages frontend ב-slh-nft.com, וטוקן SLH על BSC (BEP-20).
המערכת מוכנה לרמה מוסדית: audit log עם hash chain בלתי-שביר, CEX integrations (Bybit+Binance), AES-GCM encryption, ו-proof of reserves תשתיתי.
🎯 יעד פיננסי: 65%+ תשואה שנתית למשקיעים באמצעות שילוב של staking, DCA strategies, ו-momentum trading דרך CEX integrations.
ארכיטקטורה
שכבות המערכת
| שכבה | טכנולוגיה | Location | Purpose |
|---|---|---|---|
| Frontend | Static HTML+JS | GitHub Pages (slh-nft.com) | Public website + dashboards |
| API | FastAPI (Python) | Railway (slh-api-production) | 60+ endpoints |
| Database | PostgreSQL 15 | Railway | Users, transactions, audit |
| Cache | Redis | Railway | Rate limits, session |
| Bots | aiogram 3.x | Docker Compose (D:\SLH_ECOSYSTEM) | 25 Telegram bots |
| On-Chain | BSC + TON | External | SLH token + wallets |
| CEX | Bybit V5 + Binance V3 | External | READ-ONLY portfolio |
עמודי האתר (20+ pages)
Public
| URL | Purpose | OG Image |
|---|---|---|
/ | Landing page + Genesis Launch banner | index.png |
/trade.html | Live prices + swap | trade.png |
/earn.html | Staking 65% APY | earn.png |
/wallet.html | TON+BSC wallet + QR + CEX portfolio | wallet.png |
/bots.html | 25 bot ecosystem | bots.png |
/network.html | Neural network visualization + BSC holders | network.png |
/blockchain.html | On-chain BSC+TON data | blockchain.png |
/community.html | Posts + link upload | community.png |
/roadmap.html | Milestones timeline | roadmap.png |
/daily-blog.html | Changelog | daily-blog.png |
Launch & DEX
| URL | Purpose |
|---|---|
/launch-event.html | Genesis Launch public page with live tracker |
/partner-launch-invite.html | Personalized partner invitation |
/dex-launch.html | DEX calculator with 5 scenarios |
Admin & Internal
| URL | Purpose |
|---|---|
/admin.html | Institutional admin panel (requires admin password) |
/system-health.html | 30+ live health checks |
/dashboard.html | User dashboard (requires login) |
/ops-report-20260411.html | Detailed execution report |
/overnight-report.html | Morning briefing |
/ecosystem-guide.html | This guide 📚 |
API Endpoints (60+ total)
Base URL: https://slh-api-production.up.railway.app
🩺 Health & Stats
- GET
/api/health— basic health check - GET
/api/stats— public stats (users, staked, deposits) - GET
/api/admin/dashboard— aggregated admin stats - GET
/api/admin/activity?limit=15— recent activity feed
🔐 Auth & Users
- POST
/api/auth/telegram— Telegram Login Widget auth - POST
/api/user/ensure— idempotent user creation (manual login) - POST
/api/auth/bot-sync— bot syncs user to DB (with secret) - GET
/api/user/{telegram_id}— user profile + balances - GET
/api/user/full/{telegram_id}— everything in one call
🏛 Institutional (Audit + CEX)
- GET
/api/audit/verify-chain— SHA-256 hash chain integrity - GET
/api/audit/recent?limit=100&action_filter=...&user_id=... - POST
/api/cex/add-key— link CEX API key (encrypted AES-GCM) - GET
/api/cex/keys/{user_id}— list user's CEX keys - POST
/api/cex/sync/{key_id}— fetch balances from exchange - GET
/api/cex/portfolio/{user_id}— consolidated portfolio - DEL
/api/cex/keys/{key_id}?user_id=...
💎 Tokenomics
- GET
/api/tokenomics/stats— supply, burned, staked, reserves - POST
/api/tokenomics/internal-transfer— FREE MNH/ZVK/SLH - POST
/api/tokenomics/burn— record burn (admin) - POST
/api/tokenomics/reserves/add— add backing reserves
📊 Strategy Engine
- GET
/api/strategy/list— 3 backtested strategies - GET
/api/strategy/{id}— strategy details - GET
/api/strategy/backtest/{id}?months=12— simulated returns
🚀 Genesis Launch
- POST
/api/launch/contribute— record contribution - POST
/api/launch/verify/{id}?admin_key=...— verify + issue rewards - GET
/api/launch/status— live progress + contributors
📣 Broadcast & Shares
- POST
/api/broadcast/send— send Telegram DM to all users - GET
/api/broadcast/history— recent broadcasts - POST
/api/shares/track— log share event - GET
/api/shares/stats?days=30— share analytics
🎨 OG Images
- GET
/api/og/{slug}.png— dynamic 1200×630 PNG for social shares - Slugs: index, network, dashboard, wallet, bots, trade, earn, community, blockchain, roadmap, admin, launch-event, dex-launch, daily-blog, guides, referral
🌐 Network & Blockchain
- GET
/api/network/slh-holders?limit=100— BSC holders (BitQuery/Etherscan) - GET
/api/external-wallets/{user_id} - POST
/api/external-wallets/add
🎁 Genesis 49 + Cashback
- GET
/api/beta/status— coupon remaining - GET
/api/cashback/{user_id}— tier status - POST
/api/cashback/process/{user_id}
בוטים (25 total)
Financial
- LIVE
@SLH_AIR_bot— Main investment hub (staking, portfolio, 10-gen referrals) - LIVE
@SLH_Wallet_bot— Multi-currency wallet - LIVE
@TON_MNH_bot— ILS-pegged stablecoin - LIVE
@SLH_Ledger_bot— Transaction ledger
Community & Education
- LIVE
@NFTY_madness_bot— Tamagotchi virtual pet - BETA
@SLH_Academia_bot— Educational platform - BETA
@SLH_community_bot— Community hub
See full list at /bots.html
Multi-Token Economy
| Token | Role | Value | Supply |
|---|---|---|---|
| SLH | Premium + Governance + Staking | ₪444 internal, $0.61 DEX (planned) | 111,186,328 (fixed) |
| MNH | ILS-pegged stablecoin (free internal transfers) | 1 ₪ | Mint-on-demand |
| ZVK | Activity rewards (games, referrals, cashback) | ~₪4.4 | 100M+ |
| ZUZ | Anti-fraud "Mark of Cain" — negative rep for scammers (Guardian) | N/A | Assigned per report |
Value Mechanisms
- Buyback-and-burn: 50% of platform revenue → buy SLH → burn (deflationary)
- Staking lock-up: Users lock SLH for yield (supply shock)
- Utility demand: VIP features require SLH holdings
- Backing reserves: SLH backed by $X USDT in company wallet
- Liquidity mining: LP providers earn ZVK rewards
- Anti-fraud (ZUZ): Guardian bot assigns ZUZ to scammers — 100 ZUZ = auto-ban across all groups, cross-group intelligence
Institutional Grade
Compliance Controls
| Control | Status | Description |
|---|---|---|
| AUDIT_HASH_CHAIN | LIVE | SHA-256 immutable chain, verify via /api/audit/verify-chain |
| CEX_READ_ONLY | LIVE | Bybit V5 + Binance V3, HMAC-signed, no trade/withdraw |
| KEY_ENCRYPTION | AES-GCM v2 | cryptography lib, 256-bit key from ENCRYPTION_KEY env |
| KYC_SUMSUB | Scaffold | Endpoints ready, awaits API token |
| CUSTODY_FIREBLOCKS | Scaffold | Ready for contract + API key |
Genesis Launch Workflow
- Partner is invited via
/partner-launch-invite.html?partner=NAME - Partner sends BNB to company wallet:
0xd061de73B06d5E91bfA46b35EfB7B08b16903da4 - Partner reports TX via the form on
/launch-event.html - Admin verifies:
POST /api/launch/verify/{id}?admin_key=... - Pool created on PancakeSwap using collected BNB + treasury SLH
- LP locked in Mudra Locker for 6 months
- Contributor receives: Genesis NFT + 500 ZVK + co-founder credit in audit log
Key User Flows
New User Onboarding
1. User visits slh-nft.com
2. Clicks "Try Dashboard"
3. Dashboard: login via Telegram Widget OR manual ID entry
4. Manual ID → POST /api/user/ensure (creates in web_users)
5. If not registered → Registration panel (22.221 ILS or GENESIS49 coupon)
6. Registered → Full dashboard access
CEX Portfolio Connection
1. /wallet.html → "תיק CEX מלא"
2. Click "🔑 חבר API Key חדש"
3. Follow 11-step tutorial for Bybit (Read-Only!)
4. POST /api/cex/add-key with encrypted secrets
5. Auto-sync: POST /api/cex/sync/{key_id}
6. View: GET /api/cex/portfolio/{user_id}
Environment Variables (Railway)
| Variable | Required | Purpose |
|---|---|---|
DATABASE_URL | ✓ | PostgreSQL connection |
REDIS_URL | ✓ | Redis connection |
ENCRYPTION_KEY | ✓ | Source for AES-GCM key (SHA-256 derived) |
JWT_SECRET | ✓ | JWT signing |
BOT_SYNC_SECRET | ✓ | Shared secret for bot→API sync |
ADMIN_BROADCAST_KEY | ✓ | Admin key for broadcasts + verifications |
SLH_AIR_TOKEN | for broadcasts | @SLH_AIR_bot token |
BITQUERY_API_KEY | optional | BSC holders data |
CORS_ORIGINS | ✓ | slh-nft.com, localhost:* |
Troubleshooting
Admin shows "API offline" but endpoints work
→ Hard reload (Ctrl+Shift+R). Check console for TDZ errors in admin.html.
→ Hard reload (Ctrl+Shift+R). Check console for TDZ errors in admin.html.
User can't log in with Telegram ID
→ Check
→ Check
/api/user/ensure is live. Users shouldn't disappear anymore (fixed in commit 99b00c0).
BSC holders endpoint returns "API key not configured"
→ Set
→ Set
BITQUERY_API_KEY in Railway env (free tier at bitquery.io, 10k/month).
Broadcasts fail: "BROADCAST_BOT_TOKEN not configured"
→ Set
→ Set
SLH_AIR_TOKEN in Railway env (token from @SLH_AIR_bot).
מילון מונחים
- Genesis 49 — 49 המשתמשים הראשונים שקיבלו NFT + 10 ZVK חינם דרך קוד GENESIS49
- AMM — Automated Market Maker. PancakeSwap משתמש ב-x*y=k constant product.
- Slippage — הפרש בין המחיר הצפוי למחיר הביצוע בעסקה ב-DEX, גדל ככל שה-pool רדוד.
- LP — Liquidity Provider. מי שמפקיד את שני הטוקנים ב-pool ומקבל LP tokens בתמורה.
- Rug pull — כשיוצר ה-pool מושך את כל הנזילות ובורח. ה-Mudra Lock מונע את זה.
- TDZ — Temporal Dead Zone. באג JS שקרה ב-admin.html (תוקן).
- Hash chain — שרשרת SHA-256 בה כל רשומה מכילה hash של הקודמת, ובכך יוצרת יומן בלתי-שביר.
- KYC — Know Your Customer, תהליך אימות זהות של משתמשים.
- MPC — Multi-Party Computation. טכנולוגיית custody מתקדמת (Gnosis Safe, Fireblocks, Zengo).