Prop AMM Teardown
The wall#57 other closed program

Penguin

PSwapMdSai8tjrEXcxFeQth87xC4rRsa4VA5mhGhXkPSolscan
0.00
USDC in the pot
0
backers
0
attempts
478
transactions in 24 h
Chip in

USDC goes to this target's escrow with the Memo teardown:chip:PSwa…hXkP. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow BRPj5h…znsCAh · USDC account GmN1z5…TsFCTD

print of ELF sha256 d11977e133c29290…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
161,376,048
ELF sha256
d11977e133c292901543909e43886a2205bede844600067ffd58283d8e5b4de7
ELF size
235,528 bytes (230.0 KB)
Snapshot taken
2026-11-02 18:30 UTC
OtterSec verify
no verified build
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

26,102
sBPF instructions in .text
393
functions reached by internal calls
1,646
internal call sites
8
syscalls used

Sections

.text212,672
.dynsym264
.gnu.hash36
.hash96
.dynstr155
.rel.dyn10,384
.rodata7,355
.eh_frame188
.data.rel.ro3,064
.dynamic208
.shstrtab92

Syscalls

abortsol_create_program_addresssol_invoke_signed_rustsol_log_sol_memcmp_sol_memcpy_sol_memset_sol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .textBytes
0xccd015,616
0x4d2810,040
0x17f406,144
0xb0b05,944
0x82705,808
0x26d984,768
0x9e484,704
0x158504,592
0x32d104,528
0x1c1284,288
0x21e603,496
0x3f803,488

Strings in .rodata (14)

) when slicing `division by zeroalready borrowedrange end index already mutably borrowedtoken-swap/program/src/processor.rs
3M1gJoNCxuw6GBMRatHzCvxwbQMiUZ6VoG22UCjubQZq (bytes
Instruction: WithdrawSingleTokenTypeExactAmountOutInstruction: DepositSingleTokenTypeExactAmountInInstruction: WithdrawAllTokenTypesInstruction: DepositAllTokenTypesInstruction: SwapInstruction: Inittoken-swap/program/sr…
Error: The operation cannot be performed on the given curveError: The provided curve parameters are invalidError: The provided curve type is not supported by the program ownerError: The provided token program does not ma…
attempt to divide by zerolibraries/math/src/uint.rs
attempt to divide by zerocalled `Option::unwrap()` on a `None` valuelibraries/math/src/precise_number.rslibraries/math/src/uint.rsInteger overflow when casting to u128/home/runner/work/bpf-tools/bpf-tools/out/rust/librar…
/root/.cargo/registry/src/github.com-1ecc6299db9ec823/bs58-0.3.1/src/decode.rsError: memory allocation failed, out of memorylibrary/alloc/src/raw_vec.rscapacity overflowa formatting trait implementation returned an error…
(,)range start index out of range for slice of length slice index starts at but ends at source slice length () does not match destination slice length ()panicked at '', called `Option::unwrap()` on a `None` valuelibrar…
)EIWde
INOWY^_
)14:EFIJNOde\
..called `Option::unwrap()` on a `None` value[...]byte index is out of bounds of ``begin <= end ( is not a char boundary; it is inside ) of `BorrowErrorBorrowMutError:: TryFromSliceError
but the index is library/core/src/unicode/unicode_data.rs
LayoutError()Error

Instruction sample

Sampling recent transactions: the cron reads a few at a time from public RPC.

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slotELF sha256SizeTaken
161,376,048d11977e133c292901543909e43886a2205bede844600067ffd58283d8e5b4de7230.0 KB2026-11-02 18:30 UTC