Prop AMM Teardown
The wall#3 other closed program

Meteora DLMM

LBUZKhRxPF3XUpBCjp4YzTKgLccjZhTSDM9YuVaPwxoSolscan
0.00
USDC in the pot
0
backers
0
attempts
est. 10,285,714
transactions in 24 h
Chip in

USDC goes to this target's escrow with the Memo teardown:chip:LBUZ…Pwxo. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow AvoqcH…bpFQRF · USDC account F3wBxJ…1FGwAv

print of ELF sha256 7a03a1465ca5f2ed…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
423,977,638
ELF sha256
7a03a1465ca5f2ed1331188adb8feb024d6663b78f00f1f3f5346909946083b5
ELF size
2,198,032 bytes (2.10 MB)
Snapshot taken
2026-11-02 15:07 UTC
OtterSec verify
no verified build
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

238,640
sBPF instructions in .text
1,441
functions reached by internal calls
12,997
internal call sites
13
syscalls used

Sections

.text2,013,280
.rodata34,688
.data.rel.ro18,888
.dynamic176
.dynsym384
.dynstr221
.rel.dyn129,456
.shstrtab72

Syscalls

abortsol_get_clock_sysvarsol_get_rent_sysvarsol_invoke_signed_rustsol_log_sol_log_datasol_log_pubkeysol_memcmp_sol_memcpy_sol_memmove_sol_memset_sol_panic_sol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .textBytes
0x1016815,872
0xe75a815,184
0x16edb814,328
0x17df6014,240
0xefbf814,168
0x16ad3013,440
0x13d5a813,232
0xe08a812,640
0x19ffb012,536
0xfd77811,800
0x1005e811,800
0x10cdc011,800

Strings in .rodata (131)

uNotFoundTimedOut\
(bytes
IO Error
Deadlock!
positionoperatoru
called `Result::unwrap()` on an `Err` valueprograms/lb_clmm/src/instructions/claim_fee.rs
programs/lb_clmm/src/state/oracle.rs
programs/lb_clmm/src/instructions/permissionless_operations/increase_oracle_length.rs
src/lib.rs
programs/lb_clmm/src/instructions/position/increase_position_length2.rs
programs/lb_clmm/src/state/dynamic_position.rs
programs/lb_clmm/src/instructions/rebalance/rebalance_wrapper.rs
library/alloc/src/fmt.rs
/home/runner/work/platform-tools/platform-tools/out/rust/library/core/src/num/mod.rs
/home/runner/work/platform-tools/platform-tools/out/rust/library/core/src/iter/adapters/enumerate.rs
programs/lb_clmm/src/instructions/claim_reward.rs
programs/lb_clmm/src/pair_action_access/base.rs
programs/lb_clmm/src/state/bin.rs
programs/lb_clmm/src/state/preset_parameters2.rs
programs/lb_clmm/src/utils/token2022.rs
src/seeds.rs
/home/runner/work/platform-tools/platform-tools/out/rust/library/core/src/cell.rs
programs/lb_clmm/src/instructions/operator/set_activation_point.rs
programs/lb_clmm/src/math/price_math.rs
src/account.rs
library/alloc/src/string.rs
programs/lb_clmm/src/instructions/operator/zap_protocol_fee/process_zap_protocol_fee.rs
src/algorithms/div/reciprocal.rs
src/algorithms/div/knuth.rs
programs/lb_clmm/src/instructions/update_fees_and_rewards.rs
programs/lb_clmm/src/instructions/v2/add_liquidity2.rs
programs/lb_clmm/src/instructions/v2/add_liquidity_single_side_precise2.rs
src/bpf_writer.rs
/home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/hashbrown-0.15.4/src/raw/mod.rs
library/alloc/src/raw_vec/mod.rs
programs/lb_clmm/src/instructions/deposit/add_liquidity_by_weight.rs
programs/lb_clmm/src/instructions/position/increase_position_length.rs
programs/lb_clmm/src/instructions/rebalance/process_claim_fee_and_rewards.rs
/home/runner/work/platform-tools/platform-tools/out/rust/library/core/src/ops/arith.rs
src/instruction.rs
programs/lb_clmm/src/instructions/v2/claim_fee2.rs
programs/lb_clmm/src/instructions/v2/remove_liquidity2.rs
programs/lb_clmm/src/instructions/operator/set_pre_activation_duration.rs
programs/lb_clmm/src/math/bin_math.rs
programs/lb_clmm/src/math/utils_math.rs
programs/lb_clmm/src/state/limit_order.rs
programs/lb_clmm/src/instructions/rebalance/process_remove_liquidity.rs
programs/lb_clmm/src/instructions/limit_order/place_limit_order.rs
src/de/mod.rs
programs/lb_clmm/src/fee_calculator.rs
programs/lb_clmm/src/instructions/deposit/add_liquidity_by_strategy.rs
programs/lb_clmm/src/instructions/operator/fund_reward.rs
src/extension/mod.rs
programs/lb_clmm/src/instructions/deposit/add_liquidity_by_weight_one_side.rs
programs/lb_clmm/src/instructions/v2/update_fees_and_reward2.rs
programs/lb_clmm/src/events.rs
programs/lb_clmm/src/instructions/operator/zap_protocol_fee/jup_v6_zap.rs
src/state.rs
library/core/src/unicode/printable.rs
src/syscalls.rs
/home/runner/work/platform-tools/platform-tools/out/rust/library/core/src/iter/traits/accum.rs
programs/lb_clmm/src/instructions/withdraw/remove_all_liquidity.rs
programs/lb_clmm/src/instructions/limit_order/cancel_limit_order.rs
src/internal.rs
/home/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/string.rs
src/algorithms/add.rs
/home/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/slice.rs
programs/lb_clmm/src/instructions/rebalance/process_add_liquidity.rs
programs/lb_clmm/src/math/weight_to_amounts.rs
src/token.rs
library/core/src/str/mod.rs
src/algorithms/div/small.rs
programs/lb_clmm/src/instructions/deposit/add_liquidity_single_side_precise.rs
programs/lb_clmm/src/instructions/rebalance/rebalance_params.rs
/home/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/collections/btree/node.rs
src/common.rs
/home/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/collections/btree/navigate.rs
programs/lb_clmm/src/instructions/v2/claim_reward2.rs
programs/lb_clmm/src/instructions/operator/withdraw_ineligible_reward.rs
programs/lb_clmm/src/pair_action_access/permission_pair.rs
programs/lb_clmm/src/state/preset_parameters.rs
library/core/src/fmt/mod.rs
src/algorithms/div/mod.rs
programs/lb_clmm/src/instructions/initialize_pool/initialize_permission_lb_pair.rs
programs/lb_clmm/src/instructions/v2/swap2.rs
programs/lb_clmm/src/state/lb_pair.rs
src/onchain.rs
programs/lb_clmm/src/instructions/initialize_pool/initialize_customizable_permissionless_lb_pair.rs
programs/lb_clmm/src/instructions/permissionless_operations/go_to_a_bin.rs
src/encode.rs
src/accounts/account_loader.rs
programs/lb_clmm/src/instructions/position/common.rs
programs/lb_clmm/src/instructions/rebalance/process_resize_position.rs
programs/lb_clmm/src/state/parameters.rs
programs/lb_clmm/src/state/position.rs
src/ser/mod.rs
programs/lb_clmm/src/instructions/withdraw/remove_liquidity.rs
programs/lb_clmm/src/instructions/position/decrease_position_length.rs
programs/lb_clmm/src/instructions/deposit/add_liquidity.rs
programs/lb_clmm/src/instructions/operator/initialize_reward.rs
/home/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/raw_vec/mod.rs
/home/runner/work/platform-tools/platform-tools/out/rust/library/core/src/iter/traits/iterator.rs
programs/lb_clmm/src/instructions/operator/update_reward_duration.rs
programs/lb_clmm/src/instructions/operator/update_reward_funder.rs
programs/lb_clmm/src/state/bin_array_bitmap_extension.rs
capacity overflow
The given account is not mutable(
(index out of bounds: the len is
AccountNotAssociatedTokenAccount
Instruction: WithdrawProtocolFeeRefCell already mutably borrowedInstruction: AddLiquidityOneSideA signer constraint was violatedInvalidPlaceLimitOrderParametersR
:Instruction: SwapWithPriceImpactassertion failed: idx < CAPACITYAn owner constraint was violatedInstruction: InitializePosition2
5ProgramError caused by account: Unable to find a viable program address bump seedmid > lenfailed to fill whole buffer()a Display implementation returned an error unexpectedlyassertion failed: borrow != BorrowCounter::MI…
Unexpected variant tag: TryFromIntErrorInvalid Option representation: . The first byte must be 0 or 1from_bytesfrom_bytes_mut
programs/lb_clmm/src/instructions/claim_fee.rs__event_authority
programs/lb_clmm/src/instructions/claim_reward.rsprograms/lb_clmm/src/instructions/deposit/add_liquidity.rsprograms/lb_clmm/src/instructions/deposit/add_liquidity_by_strategy.rsprograms/lb_clmm/src/instructions/deposit/a…
update rewardsprograms/lb_clmm/src/instructions/v2/claim_fee2.rsDLMM ClaimFeesprograms/lb_clmm/src/instructions/v2/claim_reward2.rs
DLMM ClaimRewardsprograms/lb_clmm/src/instructions/v2/close_position2.rsprograms/lb_clmm/src/instructions/v2/close_position_if_empty.rsprograms/lb_clmm/src/instructions/v2/remove_liquidity2.rsDLMM RemoveLiquidityprograms…
programs/lb_clmm/src/instructions/v2/update_fees_and_reward2.rsprograms/lb_clmm/src/instructions/permissionless_operations/go_to_a_bin.rsprograms/lb_clmm/src/instructions/permissionless_operations/increase_oracle_length.…
ConstraintHasOneInvalid bin stepNonEmptyPositionConstraintSignerNonPresetBinStepReward not ended) when slicing `receiver_token_xInvalid positionBinArrayNotFoundpreset_parameterrange end index UnmatchTokenMint. Error Numb…
operator_token_xAccountNotSignerIdentical funderPermissionDeniedInvalid base feeAddrNotAvailablereceiver_token_yLiquidity locked0123456789abcdefZeroFundedAmountInvalidProgramIdInvalidTokenMintZeroLiquidityInvalidPosition…
Instruction: InitializeLbPairInstruction: InitializePermissionLbPairInstruction: InitializeCustomizablePermissionlessLbPairInstruction: InitializeBinArrayBitmapExtensionInstruction: InitializeBinArrayInstruction: AddLiqu…
Unable to find a viable program address bump seed>extra-account-metas
Unable to find a viable program address bump seeda Display implementation returned an error unexpectedlyErrorCustomInvalidArgumentInvalidInstructionDataInvalidAccountDataAccountDataTooSmallInsufficientFundsIncorrectProgr…
called `Result::unwrap()` on an `Err` valueIoInvalidUtf8EncodingInvalidBoolEncodingInvalidCharEncodingInvalidTagEncodingDeserializeAnyNotSupportedSizeLimitSequenceMustHaveLengthCustomUtf8Errorvalid_up_toerror_len12345678…
The arguments provided to a program instruction were invalidAn instruction's data contents was invalidAn account's data contents was invalidAn account's data was too smallAn account's balance was too small to complete th…
Hash table capacity overflowErrorcapacity overflowa formatting trait implementation returned an error when the underlying stream did not
attempt to add with overflowattempt to subtract with overflowattempt to multiply with overflowattempt to negate with overflowattempt to shift left with overflow)..RefCell already borrowedcalled `Option::unwrap()` on a `N…
,0x00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899[...]begin <= end…
)14:EFIJNOde
INOWY^_
attempt to divide by zerorange start index out of range for slice of length slice index starts at but ends at copy_from_slice: source slice length () does not match destination slice length (

Instruction sample

15 instructions to this program in 13 recent transactions (12 reached by CPI), grouped by their first 8 bytes. A preview; the judge's corpus is the full set.

First 8 bytesCountAccountsData length
e445a52e51cb9a1d101×10145B×5 163B×5
414b3f4ceb5b5b88517×3 19×228B×3 32B×2

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slotELF sha256SizeTaken
423,977,6387a03a1465ca5f2ed1331188adb8feb024d6663b78f00f1f3f5346909946083b52.10 MB2026-11-02 15:07 UTC