on record

Program Stats

mainnet·last 30d·3,390 programs·1,530 new · 1,860 upgrades

Deploys over timei

0500100010/1610/2210/2811/311/9

Frameworksi

IDL, security.txt, verifiedi

IDL
8.6%
security.txt
7.7%
verified build
3.5%
all three
1.2%

Categoriesi

Integrationsi

SPL Token
1038
Token-2022
711
Associated Token
361
Pump.fun
216
Meteora DLMM
124
Orca Whirlpool
108
Raydium CLMM
107
Raydium AMM
81
Metaplex Metadata
69
Jupiter
48

Identityi

namedA project name was recovered from the binary.
931
has repoA source-code repo was found in the binary or a verified build.
61
opaqueNo name, repo, or security.txt — anonymous bytecode.
1357

Lineagei

Controli

Build machinei

MacBuilt with the macOS platform-tools download, or on a Mac home folder.
424
LinuxBuilt with the Linux download. Includes Docker builds.
686
no clueNo machine paths left in the binary: stripped or remapped at build time.
1189

Fundingi

known entityDeployer was funded from a labeled exchange or bridge.
0
traced funderFunded from a specific wallet we could trace, but not a labeled entity.
4
untracedCouldn't reach the funding origin.
2295

sBPF versioni

v3105829% → 33%▲ +5pp
v2601% → 2%→ +1pp
v1251% → 0%→ -1pp
v0224469% → 64%▼ -5pp
not read30% → 0%→ 0pp

Recycled — byte-clone redeploysi

10%of today's 1,530 new deploys are byte-clone redeploys, not new code
redeploysNew deploys that are byte-clones of known code — same program, fresh id. A fact, not a judgment.
153
Pump.fun snipersThe confident bot subset: redeploys wired to Pump.fun — the launch-sniper signature.
17
already closedDeploys whose ProgramData is already gone — rent reclaimed, likely a throwaway bot that moved on.
2682
What's a throwaway bot?

A disposable on-chain program a trader deploys to run one strategy — almost always sniping new Pump.fun token launches — then closes minutes later to reclaim its rent, redeploying under a fresh id for the next run.

Why a program at all?

Sniping means "buy the instant the pool exists, atomically, or abort" — you can't do that reliably from a wallet. A tiny custom program bundles the whole attempt (and often multi-venue routing) into a single instruction that either lands complete or reverts.

Why thousands of failed transactions?

That's the race. The bot fires on every launch; most attempts lose the block or the token rugs, so they revert. The failures are the strategy — spray for the few that land.

Why redeploy and close?

The ~0.2 SOL of rent is refundable on close, and a fresh program id sidesteps any blocklist or reputation built against a known address. Cheaper and stealthier to burn identities than to keep one — so one operator can wear dozens of "new program" identities in a day.

How On Record catches it

Exact-bytecode dedup (same sha256 = same bot) collapses the redeploys into one cluster; lifecycle tracking sees the deploy → close; the failed-tx count confirms the intent. No explorer distinguishes "new protocol" from "same bot, 30th identity today" — that's a novelty-definition problem, which is exactly what this radar solves.

last 30d · updated 2026-11-14 06:24 UTC