The wall#47 other closed program
Sanctum Prop S
pegVkBpfR9GFi5Jaa9YXAHACyM9CzCNvhc5bf8GWNyWSolscan
0.00
USDC in the pot
0
backers
0
attempts
est. 1,069
transactions in 24 h
Chip in
USDC goes to this target's escrow with the Memo teardown:chip:pegV…WNyW. You can take your share back any time before a PASS.
The wallet opens only when you click. Minimum 5 USDC.
Escrow 8yjGr8…rPJVrp · USDC account 9bFd7C…4f5eY9
print of ELF sha256 8b5f206355a05d6a…, lock at 0.00% match
Snapshot.
Read from mainnet and frozen for this deploy slot.
Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
421,860,943
ELF sha256
8b5f206355a05d6afb46ecc8da134d6812cc0616ec41a84618eb66739b81fd3b
ELF size
35,600 bytes (34.8 KB)
Snapshot taken
2026-11-02 18:00 UTC
OtterSec verify
no verified build
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists
Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.
3,579
sBPF instructions in .text
81
functions reached by internal calls
100
internal call sites
8
syscalls used
Sections
| .text | 31,392 |
| .rodata | 608 |
| .dynamic | 176 |
| .dynsym | 264 |
| .dynstr | 148 |
| .rel.dyn | 2,144 |
| .shstrtab | 59 |
Syscalls
sol_get_sysvarsol_invoke_signed_csol_log_sol_log_pubkeysol_memcpy_sol_memset_sol_sha256sol_try_find_program_address
sBPF flags 0, names read from .dynsym
Largest functions
| Offset in .text | Bytes |
|---|---|
| 0x62d8 | 5,392 |
| 0x2c88 | 2,016 |
| 0x3a10 | 1,720 |
| 0x0 | 1,664 |
| 0x47b8 | 1,448 |
| 0x27e8 | 1,184 |
| 0x1c20 | 1,112 |
| 0x35a0 | 1,072 |
| 0x55d8 | 968 |
| 0x7c0 | 880 |
| 0x18c0 | 800 |
| 0x2448 | 784 |
Strings in .rodata (2)
ProgramDerivedAddress
poolGot:Wrong account. Expected:Signer privilege escalated for:InitPoolSetAdminSetPoolConfigSetTokenQuoteConfigWithdrawReserveSetOracleUpdaterSetWithdrawer** PANICKED **
Instruction sample
Sampling recent transactions: the cron reads a few at a time from public RPC.
Full kit from the judge
Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.
Pot.
Every transfer in and out of the escrow, read from Solana.
0 USDC, no backers yet. The first chip-in opens this pot.
Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.
No attempts yet. Submit a rebuild.
Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.
| Deploy slot | ELF sha256 | Size | Taken |
|---|---|---|---|
| 421,860,943 | 8b5f206355a05d6afb46ecc8da134d6812cc0616ec41a84618eb66739b81fd3b | 34.8 KB | 2026-11-02 18:00 UTC |