Prop AMM Teardown
The wall#64 other closed program

XOrca

StaKE6XNKVVhG8Qu9hDJBqCW3eRe7MDGLz17nJZetLTSolscan
0.00
USDC in the pot
0
backers
0
attempts
35
transactions in 24 h
Chip in

USDC goes to this target's escrow with the Memo teardown:chip:StaK…etLT. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow 32iL6D…YjMgpU · USDC account D9y1D5…6kELjM

print of ELF sha256 44d5ac6e34b45848…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
370,039,372
ELF sha256
44d5ac6e34b4584890c44d72ea3f9af5ab2f8fcf2874a5f3a78ab6bc264f786b
ELF size
102,624 bytes (100.2 KB)
Snapshot taken
2026-11-02 19:15 UTC
OtterSec verify
no verified build
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

10,905
sBPF instructions in .text
145
functions reached by internal calls
383
internal call sites
10
syscalls used

Sections

.text90,400
.rodata4,115
.data.rel.ro1,328
.dynamic176
.dynsym312
.dynstr178
.rel.dyn5,168
.shstrtab72

Syscalls

abortsol_get_clock_sysvarsol_get_rent_sysvarsol_invoke_signed_csol_log_sol_log_datasol_memcpy_sol_memset_sol_sha256sol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .textBytes
0x14b685,200
0x34805,120
0x76c04,504
0x88583,136
0x6ac83,064
0xb2102,952
0x55d82,736
0xefe02,632
0x9ce02,416
0x120182,088
0x143502,000
0x10d981,920

Strings in .rodata (9)

src/logger.rsProgramDerivedAddress
Yindex out of bounds: the len is
failed to fill whole buffera Display implementation returned an error unexpectedly/Users/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/string.rsInvalid bool representation: Error
) when slicing ` is not writable is not a signerrange end index has wrong seedspending_withdraw0123456789abcdef is not owned by Unable to find a viable program address bump seedsrc/pubkey.rs has wrong address
is incorrect size. Expected at least but got Invalid discriminator for account: does not match token mint account does not match owner account for token mint account
statesolana-program/src/util/account.rsUnexpected variant index: ** PANICKED **StakeUnstake (bytes WithdrawInitializeSet123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyzsrc/lib.rsError: memory allocation failed,…
)14:EFIJNOde\
INOWY^_
library/core/src/unicode/unicode_data.rslibrary/core/src/escape.rs

Instruction sample

Sampling recent transactions: the cron reads a few at a time from public RPC.

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slotELF sha256SizeTaken
370,039,37244d5ac6e34b4584890c44d72ea3f9af5ab2f8fcf2874a5f3a78ab6bc264f786b100.2 KB2026-11-02 19:15 UTC