The wall#19 other closed program

TaurusFi

9VX8EKBg6vM6tA68xaDsPkbrx26XConZjkQmhVApUptcSolscan

0.00

USDC in the pot

backers

attempts

est. 101,313

transactions in 24 h

Chip in

USDC goes to this target's escrow with the Memo teardown:chip:9VX8…Uptc. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow 7GfMBM…ZhjqXG · USDC account 9rSCja…QWApSW

print of ELF sha256 aca1671bfdd54fe1…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader

Upgradeable loader (v3)

Program data

DRnfKzRHq3gR5McRv3xvGoiXGCKbLvm2ZBYY2VRutLji

Upgrade authority

6kruCyQCPMBXGo89bjDaaJHAtyw75oXevFxZBJsnvzMv

Last deploy slot

459,497,904

ELF sha256

aca1671bfdd54fe1de2b7afb977c7687ef14ff3ecbe58a718e8e1ad1a9a50044

ELF size

205,952 bytes (201.1 KB)

Snapshot taken

2026-11-02 15:59 UTC

OtterSec verify

no verified build

Corpus

built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

21,628

sBPF instructions in .text

190

functions reached by internal calls

687

internal call sites

syscalls used

Sections

.text	180,432
.rodata	6,968
.data.rel.ro	5,184
.dynamic	176
.dynsym	240
.dynstr	128
.rel.dyn	11,888
.shstrtab	72

Syscalls

abortsol_get_sysvarsol_invoke_signed_csol_log_sol_memcpy_sol_memset_sol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .text	Bytes
0x11988	23,232
0x1e968	9,624
0x2f50	5,336
0x28678	5,128
0x178f0	4,528
0x1c2c0	4,448
0x19e00	4,000
0x7bd8	3,744
0xc9a0	3,560
0x17f0	3,160
0x210e8	2,968
0xdbd0	2,800

Strings in .rodata (43)

Division overflowedsrc/lib.rs

src/entrypoint/mod.rs

t-amm/src/instructions/migrate_global.rs

src/ops/add.rs

t-amm-common/src/math/swap.rs

library/alloc/src/fmt.rs

t-amm/src/instructions/migrate_pair.rs

/home/runner/work/platform-tools/platform-tools/out/rust/library/core/src/iter/adapters/enumerate.rs

t-amm/src/instructions/update_pair.rs

library/alloc/src/string.rs

library/alloc/src/raw_vec/mod.rs

src/decimal.rs

src/arithmetic_impls.rs

src/de/mod.rs

library/core/src/unicode/printable.rs

src/syscalls.rs

t-amm/src/instructions/update_global.rs

/home/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/slice.rs

t-amm-common/src/account/global.rs

library/core/src/str/mod.rs

t-amm/src/instructions/create_prices_batch.rs

src/ops/common.rs

t-amm/src/instructions/swap3.rs

library/core/src/fmt/mod.rs

src/ops/mul.rs

src/ops/cmp.rs

src/ops/div.rs

library/core/src/slice/sort/shared/smallsort.rs

/home/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/raw_vec/mod.rs

) when slicing `Division by zero

range end index

0123456789abcdef (bytes overflowAddition overflowedSubtraction overflowedMultiplication overflowed

Unable to find a viable program address bump seed

index out of bounds: the len is

failed to fill whole bufferFor portability reasons we do not allow to deserialize NaNs.Invalid bool representation: Not all bytes readCustomInvalidArgumentInvalidInstructionDataInvalidAccountDataAccountDataTooSmallInsuff…

%>Multiplication overflowed

;Addition overflowedScale exceeds maximum supported scaleMultiplication overflowed

Unexpected length of inputError: memory allocation failed, out of memoryErrorcapacity overflowa formatting trait implementation returned an error when the underlying stream did not

attempt to add with overflowattempt to subtract with overflowattempt to multiply with overflowattempt to negate with overflow)..called `Option::unwrap()` on a `None` value but the index is : ,

,0x00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899user-provided com…

)14:EFIJNOde

INOWY^_

attempt to divide by zerorange start index out of range for slice of length slice index starts at but ends at copy_from_slice: source slice length () does not match destination slice length (

Instruction sample

Sampling recent transactions: the cron reads a few at a time from public RPC.

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slot	ELF sha256	Size	Taken
459,497,904	aca1671bfdd54fe1de2b7afb977c7687ef14ff3ecbe58a718e8e1ad1a9a50044	201.1 KB	2026-11-02 15:59 UTC