The wall#76 other closed program
Gavel
srAMMzfVHVAtgSJc8iH6CfKzuWuUTzLHVCE81QU1rgiSolscan
0.00
USDC in the pot
0
backers
0
attempts
0
transactions in 24 h
Chip in
USDC goes to this target's escrow with the Memo teardown:chip:srAM…1rgi. You can take your share back any time before a PASS.
The wallet opens only when you click. Minimum 5 USDC.
Escrow BrtGpC…5zB615 · USDC account GXTSrB…qy7VhP
print of ELF sha256 aaed24eabdb22921…, lock at 0.00% match
Snapshot.
Read from mainnet and frozen for this deploy slot.
Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
363,331,997
ELF sha256
aaed24eabdb2292129a86bcbc77fe31c1474bcb887260a535d1aeb844fd019fa
ELF size
255,112 bytes (249.1 KB)
Snapshot taken
2026-11-02 20:00 UTC
OtterSec verify
no verified build · on-chain hash 8a20df5f58f2b72e…
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists
Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.
26,404
sBPF instructions in .text
450
functions reached by internal calls
1,238
internal call sites
10
syscalls used
Sections
| .text | 219,664 |
| .rodata | 9,859 |
| .data.rel.ro | 4,360 |
| .dynamic | 176 |
| .security.txt | 16 |
| .dynsym | 336 |
| .dynstr | 203 |
| .rel.dyn | 19,472 |
| .shstrtab | 86 |
Syscalls
abortsol_get_clock_sysvarsol_get_rent_sysvarsol_invoke_signed_rustsol_log_sol_log_datasol_memcpy_sol_memset_sol_set_return_datasol_try_find_program_address
sBPF flags 0, names read from .dynsym
Largest functions
| Offset in .text | Bytes |
|---|---|
| 0x24560 | 6,904 |
| 0x13ab0 | 5,808 |
| 0x21360 | 5,312 |
| 0x33898 | 5,216 |
| 0x1ee40 | 4,360 |
| 0xd268 | 4,256 |
| 0x126a0 | 4,160 |
| 0xb738 | 3,848 |
| 0x4050 | 3,392 |
| 0x1cb60 | 2,904 |
| 0x1bbf8 | 2,840 |
| 0x5c18 | 2,704 |
Strings in .rodata (27)
src/de/mod.rsassertion failed: mid <= self.len()failed to fill whole bufferInvalid bool representation: TargetAlignmentGreaterAndInputNotAlignedOutputSliceWouldHaveSlopSizeMismatchAlignmentMismatchBuycodeSwapKindkindSell…
Invalid pubkey for Token Accountindex out of bounds: the len is
sPool account already initializedInvalid protocol fee recipient configuration. Null recipient cannot have sharesDuplicate protocol fee recipient: ) does not match computed key ()vaultInvalid lp_position addressprogram/sr…
Incorrect program IDprogram/src/lib.rsLog authority must sign through CPIInvalid log authorityAddLiquidityRemoveLiquidityRenounceLiquidityWithdrawLpFeesInitializeLpPositionInitializePoolWithdrawProtocolFeesTransferLiquid…
Plasma
project_url
https://ellipsislabs.xyz/
contacts
email:maintainers@ellipsislabs.xyz
policy
https://github.com/Ellipsis-Labs/plasma/blob/master/SECURITY.md
preferred_languages
source_code
https://github.com/Ellipsis-Labs/plasma
auditors
contact@osec.io
src/state.rs
attempt to divide by zerosrc/arith.rscrates/plasma_state/src/amm.rsassertion failed: base_amount_desired >= base_amount_optimalcrates/plasma_state/src/lp.rssrc/encode.rscalled `Result::unwrap()` on an `Err` valueBufferTo…
123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyzsrc/entrypoint.rssrc/instruction.rssrc/pubkey.rsUnable to find a viable program address bump seedpermission deniedconnection refusednetwork unreachableconnection …
Errorlibrary/alloc/src/raw_vec.rscapacity overflowa formatting trait implementation returned an errorlibrary/alloc/src/fmt.rs
called `Option::unwrap()` on a `None` value)invalid argslibrary/core/src/fmt/mod.rs..BorrowErroralready mutably borrowed: :[panicked at :
but the index is : { , {
]library/core/src/fmt/num.rs0x0001020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394…
[...]begin <= end (`byte index is not a char boundary; it is inside ) of ` is out of bounds of `library/core/src/str/mod.rslibrary/core/src/unicode/printable.rs
)14:EFIJNOde\
INOWY^_
library/core/src/unicode/unicode_data.rslibrary/core/src/escape.rs
This program embeds a security.txt; its contacts are the place to report anything found while reading it.
Instruction sample
Sampling recent transactions: the cron reads a few at a time from public RPC.
Full kit from the judge
Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.
Pot.
Every transfer in and out of the escrow, read from Solana.
0 USDC, no backers yet. The first chip-in opens this pot.
Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.
No attempts yet. Submit a rebuild.
Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.
| Deploy slot | ELF sha256 | Size | Taken |
|---|---|---|---|
| 363,331,997 | aaed24eabdb2292129a86bcbc77fe31c1474bcb887260a535d1aeb844fd019fa | 249.1 KB | 2026-11-02 20:00 UTC |