Prop AMM Teardown
APIChip in
The wallHuntVaultVerifierDocsAPI and MCP
Chip in on the wall
The wall#62 other closed program

Saros DLMM

1qbkdrr3z4ryLA7pZykqxvxWPoeifcVKo6ZG9CfkvVESolscan
0.00
USDC in the pot
0
backers
0
attempts
136
transactions in 24 h
Chip in

USDC goes to this target's escrow with the Memo teardown:chip:1qbk…kvVE. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow H3Jacw…sHTqeW · USDC account 9xas1X…FDhX8e

print of ELF sha256 2af807547c9a91c7…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader
Upgradeable loader (v3)
Program data
33MJjVPagsAkw1Vquuv7rEcr8xGRNWpWTFXHfokzpEwC
Upgrade authority
dhEHT7iMcdULiRwufAG9E6y2F4eSRH5gJiAowhksDq2
Last deploy slot
376,317,878
ELF sha256
2af807547c9a91c75a926ad13e6d03541cf3a0155a3a710f0ca799fd629e6aa1
ELF size
723,064 bytes (706.1 KB)
Snapshot taken
2026-11-02 19:00 UTC
OtterSec verify
no verified build
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

79,453
sBPF instructions in .text
550
functions reached by internal calls
4,056
internal call sites
13
syscalls used

Sections

.text657,968
.rodata19,559
.data.rel.ro7,816
.dynamic176
.dynsym384
.dynstr235
.rel.dyn35,984
.shstrtab72

Syscalls

abortsol_create_program_addresssol_get_clock_sysvarsol_get_rent_sysvarsol_invoke_signed_rustsol_log_sol_log_pubkeysol_memcmp_sol_memcpy_sol_memmove_sol_memset_sol_sha256sol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .textBytes
0x3ba4019,784
0x2ec5816,304
0x47fb015,648
0x94e014,888
0x3746013,864
0x43da89,744
0x60b289,480
0x332b89,352
0x5e0c88,888
0x908b88,544
0x672788,528
0x637c88,240

Strings in .rodata (24)

NotFoundTimedOutUH1
(bytes
Deadlockposition
CpiGuardcalled `Result::unwrap()` on an `Err` valuesrc/accounts/account_loader.rscapacity overflow/home/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/vec/spec_from_iter_nested.rsfrom_bytesfrom_byte…
The given account is not mutableInstruction: UpdateBinStepConfigsrc/algorithms/div/reciprocal.rs
Yindex out of bounds: the len is
AccountNotAssociatedTokenAccount
A signer constraint was violated
An owner constraint was violatedProgramError caused by account: src/extension/mod.rs
src/de/mod.rsfailed to fill whole buffer()a Display implementation returned an error unexpectedly/home/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/string.rsInvalid bool representation: Error/home…
Invalid Option representation: . The first byte must be 0 or 1UninitializedTransferFeeConfigTransferFeeAmountMintCloseAuthorityConfidentialTransferMintConfidentialTransferAccountDefaultAccountStateImmutableOwnerMemoTrans…
protocol_vault_yAccountNotSignerPermissionDeniedpreset_authorityTokenGroupMemberAddrNotAvailable0123456789abcdefNotPositionOwnerActiveIdOverflowInvalidProgramIdConfidentialMintBurnsrc/internal.rs__event_authority
Kindfromkind
hookuserbaseSome <=
programs/liquidity-book/src/instructions/admin/set_hook.rshttps://general-inventory.coin98.tech/file/saros-liquidity-position-metadata.jsonprograms/liquidity-book/src/instructions/create_position.rsprograms/liquidity-boo…
~VU[QBinNotFoundInvalidAmountsBinArrayIndexMismatchInvalidAmountInInvalidDistributionLiquidityOverflowLiquidityUnderflowZeroSharesInvalidStaticFeeParametersInvalidConfigPairPositionMismatchPairLowerBinArrayMismatchPairUp…
src/instruction.rs/home/runner/work/platform-tools/platform-tools/out/rust/library/core/src/iter/traits/accum.rs
src/state.rssrc/instruction.rscalled `Result::unwrap()` on an `Err` valuea Display implementation returned an error unexpectedly/home/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/string.rsErrorMax…
123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyzUnsupported PubkeyErrorsrc/lib.rsProgramDerivedAddressUnable to find a viable program address bump seedTargetAlignmentGreaterAndInputNotAlignedOutputSliceWouldHav…
but the index is : { , {
,library/core/src/fmt/num.rs0x0001020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394…
)14:EFIJNOde\
INOWY^_
library/core/src/unicode/unicode_data.rslibrary/core/src/escape.rsattempt to divide by zero

Instruction sample

Sampling recent transactions: the cron reads a few at a time from public RPC.

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slotELF sha256SizeTaken
376,317,8782af807547c9a91c75a926ad13e6d03541cf3a0155a3a710f0ca799fd629e6aa1706.1 KB2026-11-02 19:00 UTC