Prop AMM Teardown
The wall#46 other closed program

Voltr

vVoLTRjQmtFpiYoegx285Ze4gsLJ8ZxgFKVcuvmG1a8Solscan
0.00
USDC in the pot
0
backers
0
attempts
est. 1,087
transactions in 24 h
Chip in

USDC goes to this target's escrow with the Memo teardown:chip:vVoL…G1a8. You can take your share back any time before a PASS.

The wallet opens only when you click. Minimum 5 USDC.

Escrow 2s8h89…u1qaGd · USDC account GQ86HG…WgnDMK

print of ELF sha256 084add59613719ef…, lock at 0.00% match

Snapshot.
Read from mainnet and frozen for this deploy slot.

Loader
Upgradeable loader (v3)
Program data
Upgrade authority
Last deploy slot
445,223,838
ELF sha256
084add59613719efc87260ed24d83fa4f61638bcac242aa413d8d16e84cd4df9
ELF size
961,176 bytes (938.6 KB)
Snapshot taken
2026-11-02 17:15 UTC
OtterSec verify
no verified build
Corpus
built by the judge machine: up to 1,000 recent mainnet instructions and 10,000 fuzzed variants; the real N is printed once it exists

Teardown kit.
Computed from the ELF and recent transactions, no AI. Hunters start here.

106,847
sBPF instructions in .text
728
functions reached by internal calls
5,231
internal call sites
15
syscalls used

Sections

.text884,672
.rodata19,483
.data.rel.ro6,864
.dynamic176
.dynsym432
.dynstr268
.rel.dyn48,336
.shstrtab72

Syscalls

abortsol_create_program_addresssol_get_clock_sysvarsol_get_rent_sysvarsol_get_return_datasol_invoke_signed_rustsol_log_sol_log_datasol_log_pubkeysol_memcmp_sol_memcpy_sol_memmove_sol_memset_sol_sha256sol_try_find_program_address

sBPF flags 0, names read from .dynsym

Largest functions

Offset in .textBytes
0x6121021,600
0x7b88819,872
0x8e03017,816
0x5864017,288
0x92c3815,176
0x5d04014,872
0x6710814,688
0x80f0013,096
0x771f012,552
0x6d90811,632
0x862c810,624
0x51ca010,184

Strings in .rodata (22)

NotFoundTimedOutprotocol
(bytes Treasury-'e+sH
wstrategyDeadlockdeadlock
lercalled `Result::unwrap()` on an `Err` valuesrc/accounts/account_loader.rsfrom_bytesfrom_bytes_mut
The given account is not mutableindex out of bounds: the len is
AccountNotAssociatedTokenAccount
Adaptor program not whitelisted.A signer constraint was violatedInstruction: AcceptProtocolAdminAn owner constraint was violatedProgramError caused by account: src/lib.rssrc/de/mod.rsfailed to fill whole buffer()a Displa…
Unexpected length of inputInvalid bool representation: Error/Users/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/collections/btree/navigate.rsNot all bytes readsrc/int256.rs
ConstraintHasOneConstraintSignerconnection reset) when slicing `lp_token_programmetadata_programentity not foundhost unreachableinvalid filenamerange end index . Error Number:
OperationalStateAccountNotSignervault_asset_mintPermissionDeniedno storage spaceAddrNotAvailablemetadata_account0123456789abcdefdivision by zeroInvalidProgramIdMaxSeedLengthExceededInvalidSeedsIllegalOwnerTryFromIntError…
Invalid Option representation: . The first byte must be 0 or 1>src/internal.rs
Kindfromkind
programs/voltr-vault/src/instructions/add_adaptor.rsprograms/voltr-vault/src/instructions/calibrate_high_water_mark_unsafe.rsrequest_withdraw_vault_receiptvault_lp_mint_authprograms/voltr-vault/src/instructions/deposit_s…
9programs/voltr-vault/src/lib.rsInstruction: IdlCreateAccountanchor:idlInstruction: IdlResizeAccountdata_len should always be >= the current account spaceInstruction: IdlCloseAccountInstruction: IdlCreateBufferInstructio…
src/instruction.rssrc/state.rssrc/instruction.rssrc/state.rsa Display implementation returned an error unexpectedly/Users/runner/work/platform-tools/platform-tools/out/rust/library/alloc/src/string.rsErrorMaxSeedLengthEx…
123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyzUnable to find a viable program address bump seedcalled `Result::unwrap()` on an `Err` valuesrc/encode.rsTargetAlignmentGreaterAndInputNotAlignedOutputSliceWouldH…
but the index is : { , {
,library/core/src/fmt/num.rs0x0001020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394…
[...]begin <= end (`byte index is not a char boundary; it is inside ) of ` is out of bounds of `library/core/src/str/mod.rslibrary/core/src/unicode/printable.rs
)14:EFIJNOde\
INOWY^_
library/core/src/unicode/unicode_data.rslibrary/core/src/escape.rsattempt to divide by zero

Instruction sample

Sampling recent transactions: the cron reads a few at a time from public RPC.

Full kit from the judge

Disassembly, discriminator map over the full corpus, writable and signer patterns, account sizes and owners, CPI targets: computed by the judge machine for this snapshot and published here.

Pot.
Every transfer in and out of the escrow, read from Solana.

0 USDC, no backers yet. The first chip-in opens this pot.

Attempts.
Match percentages and hashes. The source stays encrypted until the verdict.

No attempts yet. Submit a rebuild.

Upgrade history.
One snapshot per deploy slot. A submission is judged against the snapshot it targeted.

Deploy slotELF sha256SizeTaken
445,223,838084add59613719efc87260ed24d83fa4f61638bcac242aa413d8d16e84cd4df9938.6 KB2026-11-02 17:15 UTC