Prop AMM Teardown
The wall#39 other closed program

MemeFun

MEME4gfGe6itEpxgM1xaBVmiFF5XuCTc4oVXUE5w56FSolscan
0.00
USDC in the pot
0
backers
0
attempts
est. 2,938
transactions in 24 h
Chip in

USDC goes to this target's escrow with the Memo teardown:chip:MEME…w56F. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow HoYKWM…t24X6k · USDC account 8Bmve1…1SMD25

print of ELF sha256 ea09ced8c82b3064…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
453,295,836
ELF sha256
ea09ced8c82b30646ad6205d50341b8276d334b4e9403d9ec26021b27d0c2bd6
ELF size
546,928 bytes (534.1 KB)
Snapshot taken
2026-11-02 16:30 UTC
OtterSec verify
no verified build
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

57,781
sBPF instructions in .text
418
functions reached by internal calls
2,661
internal call sites
13
syscalls used

Sections

.text483,008
.rodata19,307
.data.rel.ro7,800
.dynamic176
.dynsym384
.dynstr235
.rel.dyn35,072
.shstrtab72

Syscalls

abortsol_create_program_addresssol_get_clock_sysvarsol_get_rent_sysvarsol_invoke_signed_rustsol_log_sol_log_datasol_log_pubkeysol_memcmp_sol_memcpy_sol_memset_sol_sha256sol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .textBytes
0x29c7815,784
0x153d815,256
0x2f51812,392
0x3526810,816
0x10e5810,776
0x326e810,776
0x1d9e810,400
0xb3d810,216
0x61a708,744
0x598408,616
0xed988,384
0x39be88,088

Strings in .rodata (26)

The given account is not mutableindex out of bounds: the len is
AccountNotAssociatedTokenAccount
A signer constraint was violatedAn owner constraint was violatedProgramError caused by account: internal error: entered unreachable codesrc/accounts/program.rssrc/lib.rssrc/de/mod.rsfailed to fill whole buffer()a Display…
Invalid Option representation: . The first byte must be 0 or 1
Kindfromkind
userbaseSome
mintprograms/memefun/src/curve.rsadmin transfer proposed to programs/memefun/src/instructions/admin.rsadmin transferred to Global config initialized by programs/memefun/src/instructions/create_token.rsbonding-curve
sequenceNotFoundTimedOut
metadata (bytes Deadlock
`/ipfs/programs/memefun/src/instructions/buy.rsprograms/memefun/src/instructions/sell.rsprograms/memefun/src/instructions/swap.rsprograms/memefun/src/instructions/claim.rscurve config (default) updated by fee_recipient (…
ConstraintHasOneConstraintSignerassertion `left ) when slicing `user_sol_accountrange end index . Error Number: Instruction: Buy
AccountNotSignerPermissionDeniedAddrNotAvailable right` failed: metadata_accountfloating point `0123456789abcdefInvalidProgramIdCooldown period active
buys not yet allowedEarly buy cap exceeded for this walletWallet concentration limit exceededBonding curve already completeBonding curve not yet completeToken already migratedInsufficient tokens for this operationInsuffi…
Pprograms/memefun/src/lib.rsInstruction: IdlCreateAccountanchor:idlInstruction: IdlResizeAccountdata_len should always be >= the current account spaceInstruction: IdlCloseAccountInstruction: IdlCreateBufferInstruction: I…
123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyzUnsupported PubkeyErrorsrc/lib.rsUnable to find a viable program address bump seedbyte arrayboolean ``integer `character `string unit valueOption valuenewtype str…
library/core/src/num/flt2dec/strategy/dragon.rsassertion failed: d.mant > 0assertion failed: d.minus > 0assertion failed: d.plus > 0assertion failed: buf.len() >= MAX_SIG_DIGITSassertion failed: d.mant.checked_sub(d.minu…
library/core/src/num/flt2dec/strategy/grisu.rsassertion failed: d.mant + d.plus < (1 << 61)assertion failed: !buf.is_empty()assertion failed: d.mant < (1 << 61)
;library/core/src/num/flt2dec/mod.rsassertion failed: buf[0] > b'0'assertion failed: parts.len() >= 4.0.-+NaNinf0assertion failed: buf.len() >= maxlenattempt to add with overflowattempt to subtract with overflowattempt t…
but the index is ==!=matches right` failed
right:
left: : { , {
,library/core/src/fmt/num.rs0x0001020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394…
library/core/src/str/pattern.rs[...]begin <= end (`byte index is not a char boundary; it is inside ) of ` is out of bounds of `library/core/src/str/mod.rslibrary/core/src/unicode/printable.rs
)14:EFIJNOde\
INOWY^_
library/core/src/unicode/unicode_data.rslibrary/core/src/escape.rslibrary/core/src/num/bignum.rsassertion failed: noborrowassertion failed: digits < 40assertion failed: other > 0attempt to divide by zero

Instruction sample

Sampling recent transactions: the cron reads a few at a time from public RPC.

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slotELF sha256SizeTaken
453,295,836ea09ced8c82b30646ad6205d50341b8276d334b4e9403d9ec26021b27d0c2bd6534.1 KB2026-11-02 16:30 UTC
MemeFun MEME…w56F | Prop AMM Teardown Engine