Prop AMM Teardown
The wall#54 other closed program

StepN

Dooar9JkhdZ7J3LHN3A7YCuoGRUggXhQaG4kijfLGU2jSolscan
0.00
USDC in the pot
0
backers
0
attempts
est. 632
transactions in 24 h
Chip in

USDC goes to this target's escrow with the Memo teardown:chip:Dooa…GU2j. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow KxnyvY…vUPNvF · USDC account D1ZavW…Epgimz

print of ELF sha256 f764057f44629d40…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
348,857,285
ELF sha256
f764057f44629d4080e54538263ec8a9df965f09a2cab33a3300bf905eaaf490
ELF size
194,544 bytes (190.0 KB)
Snapshot taken
2026-11-02 17:30 UTC
OtterSec verify
no verified build
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

21,354
sBPF instructions in .text
275
functions reached by internal calls
1,000
internal call sites
8
syscalls used

Sections

.text174,456
.rodata6,703
.data.rel.ro2,848
.dynamic176
.dynsym264
.dynstr155
.rel.dyn8,992
.shstrtab72

Syscalls

abortsol_create_program_addresssol_invoke_signed_rustsol_log_sol_memcmp_sol_memcpy_sol_memset_sol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .textBytes
0x697015,096
0x1cfa89,440
0xe2806,480
0x37405,896
0x52985,264
0xce285,208
0x1d184,840
0x297c84,528
0x108f04,208
0xfbd03,360
0x134e83,144
0x200502,840

Strings in .rodata (15)

token-swap/program/src/curve/base.rs
token-swap/program/src/curve/constant_price.rs/home/user/oldc/solana/solana-program-library2/libraries/math/src/uint.rstoken-swap/program/src/curve/offset.rstoken-swap/program/src/curve/stable.rstoken-swap/program/src/pr…
(bytes
Instruction: UpdatePoolFeeAccountInstruction: WithdrawSingleTokenTypeExactAmountOutInstruction: DepositSingleTokenTypeExactAmountInInstruction: WithdrawAllTokenTypesInstruction: DepositAllTokenTypesInstruction: SwapInstr…
) when slicing `already borrowedrange end index Error: ActiveVoteAccountCloseError: MaxAccountsDataSizeExceededError: IllegalOwnerError: UnsupportedSysvarError: AccountNotRentExemptError: BorshIoErrorError: InvalidSeedsE…
libraries/math/src/precise_number.rs
attempt to divide by zero
libraries/math/src/uint.rscalled `Option::unwrap()` on a `None` value123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz
/home/user/.cargo/registry/src/github.com-1ecc6299db9ec823/solana-program-1.10.19/src/entrypoint.rsUnsupported PubkeyError/home/user/.cargo/registry/src/github.com-1ecc6299db9ec823/solana-program-1.10.19/src/pubkey.rsUna…
/home/user/.cargo/registry/src/github.com-1ecc6299db9ec823/bs58-0.4.0/src/decode.rsError: memory allocation failed, out of memorylibrary/alloc/src/raw_vec.rscapacity overflowa formatting trait implementation returned an …
..BorrowErrorBorrowMutError <= called `Option::unwrap()` on a `None` value:panicked at '', but the index is `: {
, { } })library/core/src/fmt/num.rs0x00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990…
INOWY^_
)14:EFIJNOde\
library/core/src/unicode/unicode_data.rsError

Instruction sample

Sampling recent transactions: the cron reads a few at a time from public RPC.

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slotELF sha256SizeTaken
348,857,285f764057f44629d4080e54538263ec8a9df965f09a2cab33a3300bf905eaaf490190.0 KB2026-11-02 17:30 UTC