Prop AMM Teardown
The wall#45 other closed program

FluxBeam

FLUXubRmkEi2q6K3Y9kBPg9248ggaZVsoSFhtJHSrm1XSolscan
0.00
USDC in the pot
0
backers
0
attempts
est. 1,393
transactions in 24 h
Chip in

USDC goes to this target's escrow with the Memo teardown:chip:FLUX…rm1X. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow HGjdXv…g6skoE · USDC account 3nba1N…krKinQ

print of ELF sha256 8065afdd131ae8a0…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
207,458,738
ELF sha256
8065afdd131ae8a09e2493c6a03fcd1c5ae7a6fb799dc48bd3ab19de05bf134f
ELF size
227,544 bytes (222.2 KB)
Snapshot taken
2026-11-02 17:30 UTC
OtterSec verify
no verified build
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

24,449
sBPF instructions in .text
369
functions reached by internal calls
1,325
internal call sites
9
syscalls used

Sections

.text200,456
.rodata9,499
.data.rel.ro3,472
.dynamic176
.dynsym288
.dynstr176
.rel.dyn12,528
.shstrtab72

Syscalls

abortsol_create_program_addresssol_get_clock_sysvarsol_invoke_signed_rustsol_log_sol_memcmp_sol_memcpy_sol_memset_sol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .textBytes
0xdcb09,048
0x239a06,136
0x100085,928
0x141c05,824
0xc6705,696
0x117305,488
0x12ca05,408
0x3d704,784
0x2fcf84,520
0x5a584,376
0x82084,008
0x22b103,728

Strings in .rodata (21)

Non-confidential transfers disabledExtension not found in account dataAccount ownership cannot be changed while CPI Guard is enabledCPI Guard is enabled, and a program attempted to add or change an authorityCPI Guard is …
src/extension/mod.rs
) when slicing `already borrowedrange end index already mutably borrowedassertion failed: mid <= self.len()called `Option::unwrap()` on a `None` valuesrc/uint.rs
attempt to add with overflowprograms/fluxbeam/src/curve/base.rsprograms/fluxbeam/src/curve/constant_price.rsprograms/fluxbeam/src/curve/constant_product.rsprograms/fluxbeam/src/curve/offset.rsError: The pool fee account …
Instruction: WithdrawSingleTokenTypeExactAmountOutInstruction: DepositSingleTokenTypeExactAmountInInstruction: WithdrawAllTokenTypesInstruction: DepositAllTokenTypesInstruction: SwapInstruction: Initprograms/fluxbeam/src…
attempt to add with overflowsrc/instruction.rssrc/state.rs
called `Option::unwrap()` on a `None` value
attempt to subtract with overflowsrc/precise_number.rs
attempt to multiply with overflowsrc/uint.rs
attempt to add with overflow
attempt to shift left with overflow
attempt to shift right with overflow
attempt to divide by zero
attempt to add with overflow123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz
src/entrypoint.rsUnsupported PubkeyErrorsrc/pubkey.rsUnable to find a viable program address bump seed
src/decode.rsError: memory allocation failed, out of memory
library/alloc/src/raw_vec.rscapacity overflowa formatting trait implementation returned an errorlibrary/alloc/src/fmt.rs)..BorrowErrorBorrowMutError but the index is <= called `Option::unwrap()` on a `None` value:pa…
, { } }0x00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899range star…
INOWY^_
)14:EFIJNOde\
library/core/src/unicode/unicode_data.rsError

Instruction sample

Sampling recent transactions: the cron reads a few at a time from public RPC.

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slotELF sha256SizeTaken
207,458,7388065afdd131ae8a09e2493c6a03fcd1c5ae7a6fb799dc48bd3ab19de05bf134f222.2 KB2026-11-02 17:30 UTC