renato-osec/goonfi-v2-decompiled

What it is

The repository holds reconstructed Rust source for the GoonFi V2 Solana program goonuddtQRrWqqn5nFyczVKaie28f3kDkHWkHtURSLE, as first deployed at slot 448984043. The source is described as byte-identical to that deployment. The program was upgraded on 6 October 2026 to fix reported bugs, so this source describes the pre-fix version. The page does not say what the bugs were.

What to do

Two ways to check the source are given. The full check needs an archive-capable Alchemy RPC key. It builds from source, reconstructs the program from the deploy transaction's loader buffer writes, and confirms the two match beyond padding.

ALCHEMY_API_KEY=<alchemy-archive-key> ./VERIFY.sh

The build-only path needs no RPC. It writes ./goonfi.so with sha256 6a2a8670…600f767d.

./build.sh

build.sh fetches Solana platform-tools v1.48 and compiles with cargo build --release --locked. A different platform-tools version may not reproduce the same bytes, though the page does not say so.

Caveats

The sha256 is shown only as a truncated prefix and suffix, so a full comparison needs the script output. A build-only match shows the build is reproducible, not that it equals the on-chain bytes. That claim rests on VERIFY.sh. The matching is against the original deployment, not the current upgraded program. The page gives no bug descriptions, no diff against the upgrade, and no impact details.