Prop AMM Teardown
The wall#7 prop AMM

SolFi V2

SV2EYYJyRz2YhfXwXnhNAevDEui5Q6yrfyo13WtupPFSolscan
0.00
USDC in the pot
0
backers
0
attempts
est. 215,354
transactions in 24 h
Chip in

USDC goes to this target's escrow with the Memo teardown:chip:SV2E…upPF. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow AmFSJV…wp9LM8 · USDC account BtFBiP…opRpbJ

print of ELF sha256 8ab9b7a51db873fe…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
406,030,591
ELF sha256
8ab9b7a51db873fe7ce24fb83c5cb2c57e2afecf1a66239605e5eb901371c939
ELF size
236,288 bytes (230.8 KB)
Snapshot taken
2026-11-02 15:30 UTC
OtterSec verify
no verified build
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

26,013
sBPF instructions in .text
241
functions reached by internal calls
1,018
internal call sites
13
syscalls used

Sections

.text215,744
.rodata5,323
.data.rel.ro3,552
.dynamic176
.dynsym384
.dynstr228
.rel.dyn9,936
.shstrtab72

Syscalls

abortsol_get_clock_sysvarsol_get_rent_sysvarsol_invoke_signed_csol_keccak256sol_log_sol_log_datasol_memcmp_sol_memcpy_sol_memmove_sol_memset_sol_secp256k1_recoversol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .textBytes
0x157f825,792
0x12e1010,040
0x1bdf010,000
0x4a306,384
0x324b05,192
0x1d604,432
0x7ab83,880
0x63203,848
0x218f83,568
0xb9e03,280
0xa0803,272
0xad483,224

Strings in .rodata (13)

Yindex out of bounds: the len is
failed to fill whole bufferInvalid bool representation: Unexpected variant index: marketconfig<
programs/solfi-v2-program/src/instructions/swap_with_okx_sig.rsprograms/solfi-v2-program/src/instructions/update_big_blacklist.rs
programs/solfi-v2-program/src/instructions/update_fast_blacklist.rsprograms/solfi-v2-program/src/instructions/update_market_config.rs** PANICKED **src/state.rsfailed to fill whole bufferassertion failed: min <= max/home/…
(bytes or lessprogram-api/solfi-v2-api/src/state/decision_tree.rsprogram-api/solfi-v2-api/src/state/spline_u64.rsSpline y[] must be less than max_valuePoints must be monotonically increasing in both x and ySpline x[0] m…
) when slicing `range end index
0123456789abcdefsrc/error.rsbacktrace capture failed:
Caused by:
<= Error: memory allocation failed, out of memoryErrorcapacity overflowlibrary/alloc/src/raw_vec.rsa formatting trait implementation returned an errorlibrary/alloc/src/fmt.rsout of range integral type conversi…
,library/core/src/fmt/num.rs0x0001020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394…
)14:EFIJNOde\
INOWY^_
library/core/src/unicode/unicode_data.rslibrary/core/src/escape.rs

Instruction sample

15 instructions to this program in 15 recent transactions (15 reached by CPI), grouped by their first 8 bytes. A preview; the judge's corpus is the full set.

First 8 bytesCountAccountsData length
07a33cbeb5000000113×125B×1
07404b4c00000000113×125B×1
079344cf1d000000113×118B×1
079809441e000000113×118B×1
071a505142000000113×118B×1
07f396808a000000113×125B×1
07fbaacb09000000113×118B×1
0742cfee27000000113×118B×1
07fd608c00000000113×118B×1
07633d0708000000113×118B×1
070c6f4400000000113×125B×1
0e0c541404000000113×1153B×1
07a3dca201000000113×125B×1
07bcda650d000000113×125B×1
07107df10d000000113×118B×1

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slotELF sha256SizeTaken
406,030,5918ab9b7a51db873fe7ce24fb83c5cb2c57e2afecf1a66239605e5eb901371c939230.8 KB2026-11-02 15:30 UTC