earlyink
185 first flagged20 Oct 2026

Two-Source Rule: a news feed that holds single-source headlines before your trading agent acts

A corroboration layer between news feeds and LLM trading bots. Indie algo traders and small crypto funds pay.

Early · Information-injection attack benchmark on trading agents

Written for: Solo builder

Next step

This week, build the replay harness using the paper's attack scenarios against a sample open-source LLM trading agent and publish its failure rate. Post it on r/algotrading and the QuantConnect forum with a waitlist for the feed.

Why now

The defence is cheap and mechanical. Require corroboration from independent sources, check publisher domain age and reputation, and hold single-source items for a set delay. The paper's attack set gives you a ready test to sell against. Personal LLM trading agents are already running against live brokerage accounts, so the exposure is real.

What became possible

A new benchmark shows LLM trading agents can't reliably tell fabricated headlines from real news. Because they read the same feeds under near-identical policies, one fake post can push many agents into the same trade at the same moment. The AllPath and QuantHarness papers show people already running personal LLM trading agents and building verification layers around them.

Two ways in

  1. Injection Replay

    An open-source harness that replays fabricated-headline scenarios into your agent and reports which trades it would have made.

    Customer
    Developers building LLM trading bots
    Model
    Free OSS that drives traffic to the feed
  2. Two-Source feed API

    Takes RSS, X and news inputs and returns each headline with a corroboration count, first-seen time and source reputation, plus a 'hold' flag for single-source items. It labels evidence and never recommends trades.

    Customer
    Indie algo traders and small crypto trading desks
    Model
    $29 per month indie tier, $199 per month for higher volume

Competition

Early

The space is early. Nobody clearly owns the idea of a corroboration layer for LLM trading bots.

Full competition notes (10 competitors)

The space is early. Nobody clearly owns the idea of a corroboration layer for LLM trading bots. I found one direct indie competitor (Crypto Intel API, which already sells a two-or-more-source rule) and one open-source building block (crypto-news-store, which counts sources per event). Institutional novelty analytics like RavenPack cover part of the need at prices indie traders won't pay. The Two-Source feed can still stand out if it gets source independence right. That means treating syndicated copies, repeat posts and quote-tweets as one origin, not several. The Corroboration Illusion paper shows that naive counting can be gamed. The feed would also need a transparent source-reputation score, accurate first-seen timestamps across X, RSS and newswires, and a hold flag that a bot can wire in with one line. Crypto-native sources such as exchange announcements, on-chain events and official X accounts are an underserved angle, since equity vendors don't handle them well. The Injection Replay idea is more contested. TradeTrap is already open source and does fake-news fabrication and prompt injection against trading agents, and AutoRedTrader covers adaptive misinformation attacks. Both are research tools focused on equities, so a developer-friendly harness for crypto bots that plugs into common agent frameworks could still win. It will probably work best as a free funnel for the paid feed rather than as a business of its own. The main risks are that existing news APIs such as Benzinga, CryptoPanic or AlphAI add a source-count field, and that latency-sensitive traders won't accept a hold delay.

  • Crypto Intel API (dev.to launch post)

    This is the closest direct match to the Two-Source feed. It is a free API that its author says only reports hacks, depegs and similar events once two or more independent sources confirm them, and it returns a confidence score and the source list. It also tracks Fed, SEC, Treasury, CFTC and Trump feeds. It is a self-promoted indie project and I could not check its track record.

  • crypto-news-store (agent skill)

    A community agent skill, first listed in June 2026, that merges coverage of one event from several outlets into a single event with a source_count. It keeps state across runs in SQLite. It is a building block, not a hosted product with reputation scores or hold flags.

  • TradeTrap

    An academic stress-testing framework for LLM trading agents (arXiv 2512.02261), with code on GitHub. Its attacks include fake-news data fabrication, prompt injection and state tampering, run as closed-loop backtests on NASDAQ-100 equities. It overlaps heavily with the Injection Replay idea but targets researchers and equities, not crypto bot developers.

  • AutoRedTrader

    A May 2026 paper on autonomous red-teaming of trading agents. It generates synthetic financial misinformation and uses the agent's responses to make the attacks stronger over time. This is the same idea as Injection Replay. I did not confirm whether the code is public.

  • CLEANROOM

    A hackathon trading agent on Alpaca paper trading that is built to resist injection. It reports an injection test suite where 5 of 15 attacks landed with isolation off and none with it on. It shows developers care about the problem, but it is a demo, not a product.

  • The Corroboration Illusion (paper)

    A September 2026 paper on how injected articles in a news corpus distort LLM forecasts. It warns that simply counting more sources can make outputs less accurate, which matters directly for a two-source rule: repeats and syndicated copies must not count as independent confirmations.

  • RavenPack News Analytics

    An incumbent institutional vendor. Its novelty scores tell users whether an event is new, a repeat or a continuation of an earlier story, across about 19,000 sources. This covers part of the corroboration need for large funds, but it is priced and packaged for institutions, not indie bots.

  • Sharpe.ai News

    A crypto news aggregator that detects similar headlines and keeps the highest-quality version. I found no sign that it exposes a corroboration count or a hold flag to bots.

  • AlphAI

    A news feed for AI agents and trading bots, built from GDELT, SEC EDGAR and publisher RSS. Each story gets a per-ticker impact estimate and a relevance score, but there is no corroboration or single-source hold. It is the kind of feed this product would sit in front of, or a company that could add this feature.

  • Benzinga Crypto News API

    A low-latency crypto news feed over REST, websocket and RSS. Its published fields include created and updated timestamps, but I found no documented deduplication or source-count feature.

Checked 2026-10-20

Risks

  • Holding a headline costs speed, and some traders will turn the hold off
  • Broad news coverage brings licensing costs
  • Small niche
  • The product must stay a labelling tool and never give trading advice

Strong team fit and buildability; market pull is the weak point (5).

tech 7 · pull 5 · space 7 · fit 8 · build 8

Exposed

Companies that could benefit or be threatened. News and context, not investment advice.

Momentum of its main topic

168 developments this week +53 vs last week
21 Sep: 0 developments22 Sep: 0 developments23 Sep: 0 developments24 Sep: 0 developments25 Sep: 0 developments26 Sep: 0 developments27 Sep: 0 developments28 Sep: 0 developments29 Sep: 0 developments30 Sep: 0 developments1 Oct: 0 developments2 Oct: 0 developments3 Oct: 0 developments4 Oct: 0 developments5 Oct: 0 developments6 Oct: 0 developments7 Oct: 0 developments8 Oct: 32 developments9 Oct: 26 developments10 Oct: 13 developments11 Oct: 11 developments12 Oct: 14 developments13 Oct: 19 developments14 Oct: 24 developments15 Oct: 35 developments16 Oct: 31 developments17 Oct: 15 developments18 Oct: 14 developments19 Oct: 23 developments20 Oct: 26 developments
Stage: Coverage

Sources

  1. Fake News, Real Crashes: Information Injection Attacks on LLM Financial Trading AgentsarXiv
  2. AllPath: Layered Verification for a Deployed, Self-Revising LLM Trading Agent under Human-Gated and Autonomous RegimesarXiv
  3. Reliable Before Profitable: QuantHarness for Governing Financial Strategy Development with LLM AgentsarXiv

Status history

  • 2026-10-20 Flagged as buildable