on record

Program Stats

mainnet·last 24h·174 programs·75 new · 99 upgrades

Deploys over timei

0255012:0017:0022:0003:0008:00

Frameworksi

IDL, security.txt, verifiedi

IDL
4.6%
security.txt
6.3%
verified build
0.6%
all three
0%

Categoriesi

Integrationsi

SPL Token
34
Token-2022
25
Pump.fun
13
Associated Token
7
Raydium CLMM
5
Orca Whirlpool
5
Meteora DLMM
5
Raydium AMM
4
Metaplex Metadata
2
Jupiter
2

Identityi

namedA project name was recovered from the binary.
22
has repoA source-code repo was found in the binary or a verified build.
0
opaqueNo name, repo, or security.txt — anonymous bytecode.
66

Lineagei

Controli

Build machinei

MacBuilt with the macOS platform-tools download, or on a Mac home folder.
16
LinuxBuilt with the Linux download. Includes Docker builds.
28
no clueNo machine paths left in the binary: stripped or remapped at build time.
44

Fundingi

known entityDeployer was funded from a labeled exchange or bridge.
0
traced funderFunded from a specific wallet we could trace, but not a labeled entity.
0
untracedCouldn't reach the funding origin.
88

sBPF versioni

v35631% → 34%▲ +4pp
v252% → 4%▲ +2pp
v132% → 1%→ 0pp
v011065% → 60%▼ -5pp

Recycled — byte-clone redeploysi

10.7%of today's 75 new deploys are byte-clone redeploys, not new code
redeploysNew deploys that are byte-clones of known code — same program, fresh id. A fact, not a judgment.
8
Pump.fun snipersThe confident bot subset: redeploys wired to Pump.fun — the launch-sniper signature.
1
already closedDeploys whose ProgramData is already gone — rent reclaimed, likely a throwaway bot that moved on.
92
What's a throwaway bot?

A disposable on-chain program a trader deploys to run one strategy — almost always sniping new Pump.fun token launches — then closes minutes later to reclaim its rent, redeploying under a fresh id for the next run.

Why a program at all?

Sniping means "buy the instant the pool exists, atomically, or abort" — you can't do that reliably from a wallet. A tiny custom program bundles the whole attempt (and often multi-venue routing) into a single instruction that either lands complete or reverts.

Why thousands of failed transactions?

That's the race. The bot fires on every launch; most attempts lose the block or the token rugs, so they revert. The failures are the strategy — spray for the few that land.

Why redeploy and close?

The ~0.2 SOL of rent is refundable on close, and a fresh program id sidesteps any blocklist or reputation built against a known address. Cheaper and stealthier to burn identities than to keep one — so one operator can wear dozens of "new program" identities in a day.

How On Record catches it

Exact-bytecode dedup (same sha256 = same bot) collapses the redeploys into one cluster; lifecycle tracking sees the deploy → close; the failed-tx count confirms the intent. No explorer distinguishes "new protocol" from "same bot, 30th identity today" — that's a novelty-definition problem, which is exactly what this radar solves.

last 24h · updated 2026-11-14 10:57 UTC