Prop AMM Teardown
The wall#3 prop AMM

GoonFi V2

goonuddtQRrWqqn5nFyczVKaie28f3kDkHWkHtURSLESolscan
0.00
USDC in the pot
0
backers
0
attempts
est. 2,556,213
transactions in 24 h
Chip in

USDC goes to this target's escrow with the Memo teardown:chip:goon…RSLE. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow FiudaR…gvdRKu · USDC account DKywuo…x1y2Ab

print of ELF sha256 effc0338917c9c89…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
464,833,996
ELF sha256
effc0338917c9c89a1148c874d94bd4ee3ec82e11e656437af1da94429d723b4
ELF size
283,920 bytes (277.3 KB)
Snapshot taken
2026-11-03 09:45 UTC
OtterSec verify
no verified build
Corpus
1,000 real mainnet instructions from 346 transactions, slots 464,556,730 to 464,557,159, 451 account states, plus 10,000 fuzzed variants at replay · sha256 108d7e82525bc9c6…

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

31,172
sBPF instructions in .text
203
functions reached by internal calls
888
internal call sites
10
syscalls used

Sections

.text265,104
.rodata5,344
.data.rel.ro2,880
.dynamic176
.dynsym312
.dynstr192
.rel.dyn8,976
.shstrtab72

Syscalls

abortsol_get_clock_sysvarsol_get_last_restart_slotsol_get_rent_sysvarsol_get_stack_heightsol_invoke_signed_csol_log_sol_memcpy_sol_memset_sol_set_return_data

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .textBytes
0x2c8c824,440
0x12d6810,408
0x9cf89,488
0xfa109,344
0x1b9087,752
0x1fab05,912
0x5cd05,616
0x72c05,432
0x3e5805,392
0x16fd85,192
0x286b04,680
0x267604,560

Strings in .rodata (36)

index out of bounds: the len is
src/entrypoint/mod.rs
src/lib.rs
src/state/token.rs
programs/goonfi-v2/src/state/market_v2.rs
library/alloc/src/fmt.rs
library/alloc/src/string.rs
src/logger.rs
library/alloc/src/raw_vec/mod.rs
src/de/mod.rs
programs/common/src/partners/jupiter.rs
src/extension/mod.rs
src/state.rs
library/core/src/unicode/printable.rs
programs/goonfi-v2/src/utils/helpers.rs
src/internal.rs
/home/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/slice.rs
src/sysvars/rent.rs
programs/common/src/helpers.rs
library/core/src/str/mod.rs
src/account_info.rs
programs/goonfi-v2/src/state/whitelisted_key_registry.rs
library/core/src/fmt/mod.rs
programs/goonfi-v2/src/instructions/whitelisted_key_registry.rs
src/sysvars/instructions.rs
programs/goonfi-v2/src/state/bloom.rs
failed to fill whole bufferInvalid bool representation: Not all bytes readfrom_bytesfrom_bytes_mutmarket_v2-
whitelisted_key_registryvault
** PANICKED **assertion failed: dst.len() <= src.len()
) when slicing `range end index
0123456789abcdef
<= TargetAlignmentGreaterAndInputNotAlignedOutputSliceWouldHaveSlopSizeMismatchAlignmentMismatchUnexpected length of inputError: memory allocation failed, out of memoryErrorcapacity overflowa formatting trait implementat…
attempt to add with overflowattempt to subtract with overflowattempt to multiply with overflowattempt to shift left with overflow.. (bytes called `Option::unwrap()` on a `None` value but the index is : 0x0001020304050607…
)14:EFIJNOde
INOWY^_
attempt to calculate the remainder with a divisor of zerorange start index out of range for slice of length slice index starts at but ends at

Instruction sample

15 instructions to this program in 15 recent transactions (14 reached by CPI), grouped by their first 8 bytes. A preview; the judge's corpus is the full set.

First 8 bytesCountAccountsData length
010180f0fa020000113×118B×1
0101b0dde7020000114×119B×1
0101f8f3e9030000114×119B×1
0100a8fc40140500114×119B×1
0101118b71770000114×119B×1
0101aa0212000000114×119B×1
01001a68a1b50000114×119B×1
0101eb44b8000000114×119B×1
0100e60000000000114×119B×1
0101e9120b000000114×119B×1
010013d90b000000114×119B×1
0100e84c92000000114×119B×1
0101c1ad0d000000114×119B×1
01016c4be6020000114×119B×1
010070ffe4770000114×119B×1

Full kit from the judge

Computed by the judge machine on 2026-11-02 16:11 UTC.

30,196
instructions disassembled
200
functions
1,000
real instructions in the corpus
V0
sBPF version

Download the disassembly (30,596 lines, sha256 a67c25e52929dc66…) · corpus bundle

Syscalls and call counts

abort ×2sol_get_clock_sysvar ×1sol_get_last_restart_slot ×3sol_get_rent_sysvar ×1sol_get_stack_height ×1sol_invoke_signed_c ×15sol_log_ ×5sol_memcpy_ ×1sol_memset_ ×2sol_set_return_data ×1

Instruction patterns over the corpus

Per discriminator: count, account and data sizes, then each account slot as signer (s) and writable (w).

DiscriminatorCountAccountsData bytesSigner and writable slots
010100cb4c000100321419sw -w -w -w -w -w -- -- -- -w -- -- -- --
0101807c780d0000301419sw -w -w -w -w -w -- -- -- -- -- -- -- --
01010020bcbe0000251419sw -w -w -w -w -w -- -- -- -- -- -- -- --
010100f9f01a0000191419sw -w -w -w -w -w -- -- -- -- -- -- -- --
010100d012130000191419sw -w -w -w -w -w -- -- -- -- -- -- -- --
01000b00000000001713 to 1419sw -w -w -w -w -w -- -- -- -- -- -- -- --
0101681531010000161419sw -w -w -w -w -w -- -- -- -- -- -- -- --
0101c05d16260000121419sw -w -w -w -w -w -- -- -- -- -- -- -- --
01018096980000001013 to 1418 to 19sw -w -w -w -w -w -- -- -- -- -- -- -- --
0101a3fb6102000091419sw -w -w -w -w -w -- -- -- -- -- -- -- --
010160c2d700000081419sw -w -w -w -w -w -- -- -- -- -- -- -- --
01013b0aec03000081419sw -w -w -w -w -w -- -- -- -- -- -- -- --
010107406e05000081419sw -w -w -w -w -w -- -- -- -w -- -- -- --
01010065cd1d000061419sw -w -w -w -w -w -- -- -- -w -- -- -- --

Account owners and sizes

Tokenk…3VQ5DA252 accounts165B×239 82B×13
111111…11111196 accounts0B×96
Tokenz…pPxuEb65 accounts179B×34 175B×21 187B×2
goonud…tURSLE18 accounts2048B×17 719000B×1
dijkbk…D11mBu17 accounts32B×17
FqGg2Y…gRJb3P1 accounts752B×1
T1TANp…aNXvGT1 accounts9B×1
Vote11…1111111 accounts3762B×1

CPI targets

Tokenk…3VQ5DA2 calls

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slotELF sha256SizeTaken
464,833,996effc0338917c9c89a1148c874d94bd4ee3ec82e11e656437af1da94429d723b4277.3 KB2026-11-03 09:45 UTC
464,460,2835e4640ee3f47ea556166b8e7b0fd4e4c42e20ce766c42d8ef323f502737d3be1268.7 KB2026-11-02 15:07 UTC