Prop AMM Teardown
The wall#34 other closed program

Saros

SSwapUtytfBdBn1b9NUGG6foMVPtcWgpRU32HToDUZrSolscan
0.00
USDC in the pot
0
backers
0
attempts
est. 6,213
transactions in 24 h
Chip in

USDC goes to this target's escrow with the Memo teardown:chip:SSwa…DUZr. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow CjBBiW…ycTd7u · USDC account 8qiFVk…BhesK5

print of ELF sha256 a7fdf48428a321ba…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
379,101,676
ELF sha256
a7fdf48428a321ba10698d691895de0dfefe2c8682ac33cdfb02ce4a1437a150
ELF size
213,032 bytes (208.0 KB)
Snapshot taken
2026-11-02 16:08 UTC
OtterSec verify
no verified build
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

23,674
sBPF instructions in .text
321
functions reached by internal calls
1,221
internal call sites
8
syscalls used

Sections

.text193,016
.rodata6,379
.data.rel.ro2,872
.dynamic176
.dynsym264
.dynstr155
.rel.dyn9,216
.shstrtab72

Syscalls

abortsol_create_program_addresssol_invoke_signed_rustsol_log_sol_memcmp_sol_memcpy_sol_memset_sol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .textBytes
0x9ac814,608
0x217889,224
0x64786,944
0x128f86,000
0x111a05,976
0x47605,664
0x83e85,272
0xfd785,160
0x2e0504,520
0x15304,072
0x14c604,056
0x162703,400

Strings in .rodata (15)

Error: ActiveVoteAccountCloseError: AccountsDataBudgetExceededError: IllegalOwnerError: UnsupportedSysvarError: AccountNotRentExemptError: BorshIoErrorError: InvalidSeedsError: MaxSeedLengthExceededError: AccountBorrowFa…
)Findex out of bounds: the len is Error: Input token account emptyError: MissingRequiredSignatureError: IncorrectProgramIdError: InsufficientFundsError: AccountDataTooSmallError: InvalidAccountDataError: InvalidInstructi…
) when slicing `already borrowedrange end index already mutably borrowedsrc/uint.rsprogram/src/curve/base.rsprogram/src/curve/constant_price.rsprogram/src/curve/offset.rsprogram/src/curve/stable.rsprogram/src/processor.r…
(bytes
metadataError: Metadata account is not the correct PDASaros LP TokenSLPhttps://general-inventory.coin98.tech/file/saros-metadata.jsonFDbLZ5DRo61queVRH9LL1mQnsiAoubQEnoCRuPEmH9M8
Instruction: InitializeMetadataInstruction: SwapExactOutInstruction: WithdrawSingleTokenTypeExactAmountOutInstruction: DepositSingleTokenTypeExactAmountInInstruction: WithdrawAllTokenTypesInstruction: DepositAllTokenType…
called `Option::unwrap()` on a `None` valuesrc/precise_number.rssrc/uint.rs
attempt to divide by zero123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz
src/entrypoint.rssrc/pubkey.rs
src/decode.rsError: memory allocation failed, out of memory
library/alloc/src/raw_vec.rscapacity overflowa formatting trait implementation returned an errorlibrary/alloc/src/fmt.rs)..BorrowErrorBorrowMutError but the index is <= called `Option::unwrap()` on a `None` value:pa…
, { } }0x00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899range star…
INOWY^_
)14:EFIJNOde\
library/core/src/unicode/unicode_data.rsError

Instruction sample

Sampling recent transactions: the cron reads a few at a time from public RPC.

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slotELF sha256SizeTaken
379,101,676a7fdf48428a321ba10698d691895de0dfefe2c8682ac33cdfb02ce4a1437a150208.0 KB2026-11-02 16:08 UTC