Prop AMM Teardown
The wall#63 other closed program

Moonit

MoonCVVNZFSYkqNXP6bxHLPL6QQJiMagDL3qcqUQTrGSolscan
0.00
USDC in the pot
0
backers
0
attempts
41
transactions in 24 h
Chip in

USDC goes to this target's escrow with the Memo teardown:chip:Moon…QTrG. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow 7PRzXF…DWv3TU · USDC account CPZQd8…MJZ4oK

print of ELF sha256 0f0fda99f247fbea…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
350,198,871
ELF sha256
0f0fda99f247fbea0dab5be3440ab06e7be768ccf07db24e83273ec248f18dcc
ELF size
686,344 bytes (670.3 KB)
Snapshot taken
2026-11-02 19:30 UTC
OtterSec verify
no verified build
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

73,933
sBPF instructions in .text
892
functions reached by internal calls
4,013
internal call sites
12
syscalls used

Sections

.text613,176
.rodata16,223
.data.rel.ro8,928
.dynamic176
.dynsym360
.dynstr214
.rel.dyn46,320
.shstrtab72

Syscalls

abortsol_create_program_addresssol_get_rent_sysvarsol_invoke_signed_rustsol_log_sol_log_datasol_log_pubkeysol_memcmp_sol_memcpy_sol_memset_sol_sha256sol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .textBytes
0x365b818,136
0x3ec6815,944
0x4584015,632
0x3b42013,888
0x4ef1813,832
0x2ce0010,312
0x432f09,552
0x687008,832
0x5caf87,712
0x7f1606,912
0x52f706,184
0x49a185,960

Strings in .rodata (36)

The given account is not mutableToken Total Supply out of boundsindex out of bounds: the len is
A signer constraint was violatedAn owner constraint was violatedProgramError caused by account: Multiplication overflowed
src/arithmetic_impls.rssrc/de/mod.rsfailed to fill whole buffer()a Display implementation returned an error unexpectedly/Users/dmitri/work/git/platform-tools/out/rust/library/alloc/src/string.rs
attempt to add with overflowErrorcalled `Option::unwrap()` on a `None` value/Users/dmitri/work/git/platform-tools/out/rust/library/alloc/src/collections/btree/navigate.rsTryFromIntErrorUnexpected variant index: MaxSeedLe…
Kindfromkind
programs/token-launchpad/src/instructions/buy.rsTransfering collateral from buyer to curve account: , Helio fee: , Dex fee: programs/token-launchpad/src/instructions/buy_anti_snipe.rsprograms/token-launchpad/src/instruct…
) when slicing `Division by zero
config_authorityrange end index . Error Number: Instruction: BuyCreateIdempotentPermissionDenied
AddrNotAvailable0123456789abcdefprograms/token-launchpad/src/state/curve/linear_curve_v1.rsprograms/token-launchpad/src/state/curve/curve_state.rsprograms/token-launchpad/src/state/curve/trade_validations.rsprograms/toke…
metadata
(bytes Deadlockmint_metadataconfig_accountbackend_authoritytoken_programassociated_token_programmpl_token_metadatasystem_programsender_token_accounthelio_feedex_feemigration_authority_token_accountmigration_authorityheli…
programs/token-launchpad/src/lib.rsInstruction: IdlCreateAccountanchor:idlInstruction: IdlResizeAccountdata_len should always be >= the current account spaceInstruction: IdlCloseAccountInstruction: IdlCreateBufferInstruc…
attempt to add with overflow
invalid args/Users/dmitri/work/git/platform-tools/out/rust/library/core/src/fmt/mod.rs
attempt to multiply with overflow
attempt to divide by zero
attempt to subtract with overflowsrc/decimal.rs
attempt to negate with overflow
;src/arithmetic_impls.rsNumber exceeds maximum value that can be represented.Number less than minimum value that can be represented.Number has a high precision that can not be represented.Scale exceeds the maximum precis…
src/ops/div.rssrc/ops/mul.rsDivision overflowedsrc/maths.rsgeo mean circuit breakerAddition overflowed
attempt to add with overflowcalled `Result::unwrap()` on an `Err` valuesrc/generated/instructions/create_metadata_account_v3.rs
attempt to add with overflowsrc/instruction.rs
src/state.rssrc/instruction.rsassertion failed: `` does not match `AssociatedTokenAccountInstruction::Create |
AssociatedTokenAccountInstruction::CreateIdempotent`CreateRecoverNesteda Display implementation returned an error unexpectedly/Users/dmitri/work/git/platform-tools/out/rust/library/alloc/src/string.rs
attempt to add with overflowMaxSeedLengthExceededInvalidSeedsIllegalOwnerCustomInvalidArgumentInvalidInstructionDataInvalidAccountDataAccountDataTooSmallInsufficientFundsIncorrectProgramIdMissingRequiredSignatureAccountA…
attempt to multiply with overflowsrc/encode.rscalled `Result::unwrap()` on an `Err` valueBufferTooSmallIoInvalidUtf8EncodingInvalidBoolEncodingInvalidCharEncodingInvalidTagEncodingDeserializeAnyNotSupportedSizeLimitSeque…
123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyzsrc/entrypoint.rssrc/instruction.rsUnsupported PubkeyErrorsrc/pubkey.rsUnable to find a viable program address bump seedsrc/rent.rsLength of the seed is too long …
Custom program error: The arguments provided to a program instruction were invalidAn instruction's data contents was invalidAn account's data contents was invalidAn account's data was too smallAn account's balance was to…
Errorlibrary/alloc/src/raw_vec.rscapacity overflowa formatting trait implementation returned an errorlibrary/alloc/src/fmt.rs
called `Option::unwrap()` on a `None` value)invalid argslibrary/core/src/fmt/mod.rs..BorrowErrorBorrowMutErroralready borrowed: already mutably borrowed: :[panicked at :
but the index is : { , {
]library/core/src/fmt/num.rs0x0001020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394…
[...]begin <= end (`byte index is not a char boundary; it is inside ) of ` is out of bounds of `library/core/src/str/mod.rslibrary/core/src/unicode/printable.rs
)14:EFIJNOde\
INOWY^_
library/core/src/unicode/unicode_data.rslibrary/core/src/escape.rs

Instruction sample

Sampling recent transactions: the cron reads a few at a time from public RPC.

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slotELF sha256SizeTaken
350,198,8710f0fda99f247fbea0dab5be3440ab06e7be768ccf07db24e83273ec248f18dcc670.3 KB2026-11-02 19:30 UTC