on record

Program Stats

mainnet·last 1y·since Jul 9, 2026i·7,748 programs·3,577 new · 4,171 upgrades

Deploys over timei

0500010000archiverecord startsNov '25Jan '26Apr '26Jul '26Sep '26

Frameworksi

anchor389859% → 46%▼ -13pp
native204522% → 30%▲ +8pp
pinocchio154618% → 22%▲ +4pp
unknown1091% → 2%→ +1pp
anchor v2210% → 0%→ +0pp
quasar10% → 0%→ 0pp

IDL, security.txt, verifiedi

IDL
10.5%
security.txt
8.9%
verified build
3.9%
all three
1%

Categoriesi

DEX
483
STAKING
324
LAUNCHPAD
153
LENDING
87
PERPS
86
BRIDGE
110
ORACLE
87
NFT
82
GOV
52
AIRDROP
21
TOKEN
47
INFRA
87
DEFI
471
UNKNOWN
5530

Integrationsi

SPL Token
3916
Token-2022
2567
Associated Token
1256
Pump.fun
635
Meteora DLMM
404
Raydium CLMM
369
Orca Whirlpool
359
Metaplex Metadata
304
Raydium AMM
283
Jupiter
169

Identityi

namedA project name was recovered from the binary.
3931
has repoA source-code repo was found in the binary or a verified build.
324
opaqueNo name, repo, or security.txt — anonymous bytecode.
3658

Lineagei

novelNo known code relative on record — genuinely new code.
23
variantLoosely similar to a known program, but not a direct copy.
7297
fork≥60% code match to a known program — a fork or close derivative.
300

Controli

mutableHas an upgrade authority — the deployer can still replace the code (including to rug).
7174
frozenUpgrade authority is null — the code can never be changed by anyone.
446
verified buildThe on-chain bytecode reproduces from public source code.
265

Build machinei

MacBuilt with the macOS platform-tools download, or on a Mac home folder.
2102
LinuxBuilt with the Linux download. Includes Docker builds.
2724
no clueNo machine paths left in the binary: stripped or remapped at build time.
2770
not readNo stored bytecode to read yet.
24

Fundingi

known entityDeployer was funded from a labeled exchange or bridge.
24
traced funderFunded from a specific wallet we could trace, but not a labeled entity.
34
untracedCouldn't reach the funding origin.
7562

sBPF versioni

v312890% → 23%▲ +23pp
v2800% → 1%→ +1pp
v1250% → 0%→ +0pp
v029601% → 52%▲ +51pp
not read339499% → 24%▼ -75pp

Recycled — byte-clone redeploysi

7.4%of today's 3,577 new deploys are byte-clone redeploys, not new code
redeploysNew deploys that are byte-clones of known code — same program, fresh id. A fact, not a judgment.
266
Pump.fun snipersThe confident bot subset: redeploys wired to Pump.fun — the launch-sniper signature.
26
already closedDeploys whose ProgramData is already gone — rent reclaimed, likely a throwaway bot that moved on.
11645
What's a throwaway bot?

A disposable on-chain program a trader deploys to run one strategy — almost always sniping new Pump.fun token launches — then closes minutes later to reclaim its rent, redeploying under a fresh id for the next run.

Why a program at all?

Sniping means "buy the instant the pool exists, atomically, or abort" — you can't do that reliably from a wallet. A tiny custom program bundles the whole attempt (and often multi-venue routing) into a single instruction that either lands complete or reverts.

Why thousands of failed transactions?

That's the race. The bot fires on every launch; most attempts lose the block or the token rugs, so they revert. The failures are the strategy — spray for the few that land.

Why redeploy and close?

The ~0.2 SOL of rent is refundable on close, and a fresh program id sidesteps any blocklist or reputation built against a known address. Cheaper and stealthier to burn identities than to keep one — so one operator can wear dozens of "new program" identities in a day.

How On Record catches it

Exact-bytecode dedup (same sha256 = same bot) collapses the redeploys into one cluster; lifecycle tracking sees the deploy → close; the failed-tx count confirms the intent. No explorer distinguishes "new protocol" from "same bot, 30th identity today" — that's a novelty-definition problem, which is exactly what this radar solves.

last 1y · updated 2026-11-12 19:06 UTC