The wall#16 other closed program

Byreal

REALQqNEomY6cQGZJUGwywTBD2UmDT32rZcNnfxQ5N2Solscan

0.00

USDC in the pot

backers

attempts

est. 237,624

transactions in 24 h

Chip in

USDC goes to this target's escrow with the Memo teardown:chip:REAL…Q5N2. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow 5f5Jy5…KpNR5p · USDC account 3jSexh…bhwKXL

print of ELF sha256 1dc2dd8b6fcdd01e…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader

Upgradeable loader (v3)

Program data

6YDesqidNpd8H4pWThk3yzT1aYaHLK4XYDXJcwbgMxdq

Upgrade authority

EmEa9b4yGffixdeFQ9zoyB3V5D9PZAbcE79mfwXb3bhs

Last deploy slot

438,767,271

ELF sha256

1dc2dd8b6fcdd01ed9818333a9fb02aac19a1eb06fb74ec1db83bdb7dd5fce16

ELF size

1,488,392 bytes (1.42 MB)

Snapshot taken

2026-11-02 15:19 UTC

OtterSec verify

no verified build

Corpus

built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

161,672

sBPF instructions in .text

950

functions reached by internal calls

8,245

internal call sites

syscalls used

Sections

.text	1,359,664
.rodata	29,227
.data.rel.ro	19,160
.dynamic	176
.dynsym	456
.dynstr	281
.rel.dyn	78,480
.shstrtab	72

Syscalls

abortsol_create_program_addresssol_get_clock_sysvarsol_get_rent_sysvarsol_get_return_datasol_invoke_signed_rustsol_log_sol_log_datasol_log_pubkeysol_memcmp_sol_memcpy_sol_memmove_sol_memset_sol_sha256sol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .text	Bytes
0x3a178	21,296
0x910f8	17,064
0xf75c0	16,696
0x1ead8	14,936
0xa5030	14,880
0x43c28	14,064
0xc8528	13,560
0x9c908	13,216
0x8d640	12,776
0xacf38	12,712
0x3f4a8	11,752
0x4a1c8	11,320

Strings in .rodata (42)

FNotFoundTimedOut<

+o,amount:Fo

filename

(bytes

{Deadlockdeadlockposition

Lcalled `Result::unwrap()` on an `Err` valuesrc/accounts/account_loader.rs

The given account is not mutablecore/src/unicode/unicode_data.rs

dInstruction: DecreaseLiquidityV2Instruction: UpdateAmmAdminGroup

Yassertion failed: liquidity != 0index out of bounds: the len is

AccountNotAssociatedTokenAccount

Invalid first tick array accountInstruction: TransferRewardOwner

)Fpool_tick_array_bitmap_extensionA signer constraint was violatedInstruction: SetPoolTradeFeeRatetick % tick_spacing must be zeroInstruction: ClaimOffchainReward

Square root price limit overflowAn owner constraint was violatedInstruction: IncreaseLiquidityV2ProgramError caused by account: src/lib.rssrc/extension/mod.rsmid > lensrc/de/mod.rsfailed to fill whole buffer()a Display i…

fromkind

baseSome

lineNone

MaxSeedLengthExceededInvalidSeedsIllegalOwnererror_nameerror_code_numbererror_msgerror_origincompared_valuesAccountNameTryFromIntErrorValuesPubkeysUnexpected variant index: CustomInvalidArgumentInvalidInstructionDataInva…

tick_spacing)programs/amm/src/libraries/tick_math.rs

ConstraintHasOneConstraintSigneralloc/src/fmt.rsconnection resetassertion `left ) when slicing `metadata_programinput_vault_mintentity not foundhost unreachableinvalid filenamerange end index tick_array_lower. Error Numb…

AccountNotSignerPermissionDeniedtick_array_upperno storage spaceAddrNotAvailable right` failed: metadata_account0123456789abcdefdivision by zeroInvalidProgramIdprograms/amm/src/states/admin_group.rsprograms/amm/src/state…

byreal-clmm

project_url

contacts

policy

source_code

https://github.com/byreal-git/byreal-clmm

preferred_languages

auditors

byreal

programs/amm/src/lib.rsInstruction: IdlCreateAccountanchor:idlInstruction: IdlResizeAccountdata_len should always be >= the current account spaceInstruction: IdlCloseAccountInstruction: IdlCreateBufferInstruction: IdlWri…

src/instruction.rs/Users/runner/work/platform-tools/platform-tools/out/rust/library/core/src/iter/traits/accum.rs/Users/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/raw_vec.rssrc/extension/mod.rss…

src/ser/mod.rs/Users/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/raw_vec.rscalled `Result::unwrap()` on an `Err` valuesrc/generated/instructions/create_metadata_account_v3.rssrc/instruction.rs/Us…

src/state.rs/Users/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/raw_vec.rssrc/instruction.rssrc/state.rsfailed to write whole buffer/Users/runner/work/platform-tools/platform-tools/out/rust/librar…

123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyzUnsupported PubkeyErrorsrc/lib.rsProgramDerivedAddressUnable to find a viable program address bump seed/Users/runner/work/platform-tools/platform-tools/out/rust/l…

but the index is ==!=matches right` failed

right:

left: : { , {

,core/src/fmt/num.rs0x000102030405060708091011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798…

)14:EFIJNOde

INOWY^_

attempt to divide by zeroattempt to calculate the remainder with a divisor of zeronumber not in the range 0..=

range start index out of range for slice of length slice index starts at but ends at

This program embeds a security.txt; its contacts are the place to report anything found while reading it.

Instruction sample

14 instructions to this program in 13 recent transactions (14 reached by CPI), grouped by their first 8 bytes. A preview; the judge's corpus is the full set.

First 8 bytes	Count	Accounts	Data length
e52ed584692828e4	11	15×2 16×3 17×2 19×4	41B×11
2b04ed0b1ac91e62	3	16×1 17×1 19×1	41B×3

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slot	ELF sha256	Size	Taken
438,767,271	1dc2dd8b6fcdd01ed9818333a9fb02aac19a1eb06fb74ec1db83bdb7dd5fce16	1.42 MB	2026-11-02 15:19 UTC