HiBid Auction Bot: Fully Autonomous Bidding Across 3 Live Auction Platforms — Zero Manual Intervention

Auto auction platforms like HiBid run hundreds of simultaneous lots across multiple locations, with soft-close timers that extend as bids come in. Manual bidding across three separate platforms — each with different authentication systems, different APIs, and different lot data formats — was impossible to scale. By the time a human operator placed bids across dozens of lots, the auction had already moved on. The client needed a system that could watch every lot in real time, know the exact current price, and place bids instantly and autonomously — across all three platforms simultaneously — without any human involvement.

We built HiBid Auto Auction Bidding Bot as a full-stack Django application with a React dashboard. The authentication layer uses Playwright headless Chromium to navigate each platform's login flow, capture session tokens (Bearer JWT for Rivercity via network interception, AWS WAF tokens and session cookies for Sacramento/Delaney), and store them in the Account table for all subsequent API calls. The lot scrapers paginate through each platform's listing API efficiently scanning hundreds of live lots simultaneously, matching against imported watchlists and bulk-updating all matched records instantly. The bidding engine runs continuously: it queries all lots where current_amount < max_bid, randomly selects up to run_proccess lots, randomly assigns accounts, and dispatches all bids in parallel. Rivercity bids use the full LotBid GraphQL mutation, returning bid status, suggested amounts, soft close timers, and complete lot state. Sacramento and Delaney bids use REST POST with the captured session credentials. All bid requests rotate proxies (random port from the configured pool) and fake user agents. Max Speed mode runs the bidding engine at peak power — enabling surge bidding in the final seconds of any auction close. Django Channels WebSockets broadcast live stats to the dashboard after every batch, with operators able to adjust run_proccess inline without leaving the dashboard.

Django 4.2 + DRF API. Django Channels WebSockets for live dashboard updates. Celery + Redis for task queue. Playwright headless Chromium for session authentication and cookie harvesting. Concurrent lot scraping and bid dispatch via async execution. HiBid GraphQL API (LotBid mutation, LotSearch query). Sacramento/Delaney REST APIs. 2captcha for CAPTCHA bypass. Rotating proxy pool (host/port range managed via dashboard). PostgreSQL with bulk ORM operations. React + Reactstrap + ApexCharts dashboard.