Proof
SandboxA claim says Live only when a current read backs it, and then it links to evidence you can open and says when it was read. Available means a page you open and run yourself, which this server does not observe. Not checked means the read failed or cannot be made; Building means it is not built yet. Neither of those has a link.
Claims
- Program on Solana Explorer(opens in a new tab)
The loka_vault program is deployed on devnet and executable.
LiveChecked against Solana devnet at , 0 s before this page loaded.
- Initialize transaction on Solana Explorer(opens in a new tab)
The vault is initialized for devnet USDC.
LiveChecked against Solana devnet at , 0 s before this page loaded.
- /verify and its labelled test receipt
A receipt's three signatures are checked in your browser, with nothing sent to a server.
AvailableA page you run yourself: the check happens in your browser, so this server does not observe it and does not call it Live.
- The secp256r1 feature account on Solana Explorer (active since slot 380592000)(opens in a new tab)wire.rs (verify_precompile)(opens in a new tab)
The program checks the phone's P-256 signature on chain through Solana's secp256r1 precompile, whose runtime feature is active on devnet.
LiveChecked against Solana devnet at , 0 s before this page loaded.
- The program job for main's latest commit (fb0d991) on GitHub(opens in a new tab)Every program workflow run(opens in a new tab)
The program's Anchor tests passed on a local validator for main's latest commit, after a check that the secp256r1 feature is active there. They run for every pull request and every push to main.
LiveChecked against GitHub at , 0 s before this page loaded.
A live feed of the program's transactions, read by your browser straight from devnet.
Not checkedBuilt, but this page cannot see your browser's connection. Open /live from the menu: it says Live only while its WebSocket to devnet carries traffic, and says so when it does not.
- Proof of reserves below
Proof of reserves from the program's accounts, every balance read at one slot.
LiveChecked against Solana devnet at , 0 s before this page loaded.
- The first iPhone payment, settled Sat Oct 10 4:23 PM ET, on Solana Explorer(opens in a new tab)Newer transactions on /live
A payment note has been redeemed on devnet.
LiveChecked against Solana devnet at , 0 s before this page loaded.
- The server's health check (slot 509733021, commit 0680451)(opens in a new tab)The server's code (server/)(opens in a new tab)
The settlement server at api.zerobars.us is running and reading devnet: its health check names the pinned program and a slot it read for that request.
LiveChecked against api.zerobars.us at , 0 s before this page loaded.
Anyone can install the iPhone app from a public TestFlight link.
BuildingTestFlight build 1 has been in Apple beta review since Sat Oct 10 12:05 AM ET, and the public link appears here once Apple approves. The team runs build 5, with the scanner fix, through internal TestFlight. Status as of 2026-10-10.
Proof of reserves
The vault's tokens against everything the program owes, from the program's own accounts on devnet.
- Assets: vault balance
- 16.25 sandbox USDC
- Allowances still spendable (9)
- 15.54 sandbox USDC
- Bonds
- 0.00 sandbox USDC
- Merchant balances (5)
- 0.71 sandbox USDC
- Liabilities: total owed
- 16.25 sandbox USDC
- Assets minus liabilities
- 0.00 sandbox USDC
- Vault account checks
- Pinned devnet USDC mintOwned by the vault account
Every account counted
- Allowance 16319765427531752700: cap 5.00, redeemed 0.00, bond 0.006KE2jcdNoS9rze1itXnD99m6EMm4ET2V7oECyPJqL6yG(opens in a new tab)
- Allowance 16928518501635994867: cap 1.00, redeemed 0.01, bond 0.006byV4ed5d5sqW1vCZztzeghUHix6ognWtLF8CGdCGMtJ(opens in a new tab)
- Allowance 4857301186742846252: cap 1.00, redeemed 0.00, bond 0.009A1dDTDGBBKtZLQKWp3iiGyJp13iPrC39VnUBq9H6rBx(opens in a new tab)
- Allowance 662324306946769554: cap 5.00, redeemed 0.00, bond 0.009b1EAS8BDSGtsspxbGxqW4QaHcUCmCfF7E7y5psT8DDJ(opens in a new tab)
- Allowance 7538000052323868002: cap 0.25, redeemed 0.00, bond 0.00BChyMSxHi2oRitHS69EBvjKXzsEGQmZKo4UuZweZ1M2K(opens in a new tab)
- Allowance 14904987241876185991: cap 1.00, redeemed 0.10, bond 0.00BcbVkCbBuSogtrxPoFmVrA8kEejjEgbwu5DMCkA4GXVV(opens in a new tab)
- Allowance 10652706154269594633: cap 1.00, redeemed 0.60, bond 0.00Bq6E28m42sJZzWzWLtyKMm8f1mttMyqZG6xvpEtdKgbP(opens in a new tab)
- Allowance 16514772724488785832: cap 1.00, redeemed 0.00, bond 0.00F6rVxUpcUD2fCHrW76AtiLnAYTUDLJCQnGnbTQdZMWv8(opens in a new tab)
- Allowance 15492088749375853434: cap 1.00, redeemed 0.00, bond 0.00HaiDkSnjkrvXArGa9ZuK1YxsCXVCGNBk5HBBEwrtwL89(opens in a new tab)
- Merchant balance 0.002ywXKzmW8na4MKZi51QEX4SjRmsPTGAr8iLFWh8Ljg47(opens in a new tab)
- Merchant balance 0.605rSVHmvh1yk1eLF3xt9XijUEXLUDPrwA7nKfqsmWWebk(opens in a new tab)
- Merchant balance 0.10E2SQAV3a9z1e5jojuEqk75G3SYmsrU5g46iscDbfPcaa(opens in a new tab)
- Merchant balance 0.00Gxc18K4TodN1qJ1MywnZDq1SwYK5TZD5AbKeBMN2cgEX(opens in a new tab)
- Merchant balance 0.01tZL1pgMnqSNSrjmeprmGvhQPusXAUyKzaHvpQSKrDBQ(opens in a new tab)
Read from Solana devnet at slot 509733021, every balance in one call (accounts listed at slot 509733021 and checked again at slot 509733021), , 0 s before this page loaded.
How it is counted
- Opening an allowance moves its cap plus its bond into the vault (open.rs(opens in a new tab)).
- Redeeming a note adds its amount to the allowance's redeemed total and to the merchant's balance; no tokens leave the vault (redeem.rs(opens in a new tab)).
- A withdrawal pays part of a merchant's balance out of the vault (withdraw.rs(opens in a new tab)).
- So the vault owes each allowance its cap minus redeemed, plus its bond, and each merchant its balance.
Not shown
- Bounty and operator credits: the program has no such accounts, so there is nothing on chain to count.
- Network fees: separate fee-payer wallets pay them; the vault never pays a fee.
- Expired allowances are still counted as owed: the program has no reclaim instruction yet, so their unspent tokens stay in the vault.
Built this weekend
Commits on main since hacking started, Fri Oct 9 8:08 PM ET (after the pre-hacklanta-kit tag).
- Commits
- 573
- Authors (among 250 listed commits)
- 4
- Files changed (GitHub lists at most 300)
- 300+
- Lines added (at least)
- 18,402+
- First commit
- Not shown: list cut short
- Latest commit
- Not shown: list cut short
GitHub logins: AblazedTC, khadimswe, pravinireri, StephenSook. GitHub listed 250 of the 573 commits.
GitHub gave no line count for 189 of the 300 files (binary files and diffs too large to show), so lines added is a floor. For the exact count, run git diff --shortstat pre-hacklanta-kit main in a clone.
Read from GitHub's API (refreshed at most every 5 minutes), : a cached read, 3 min old when this page loaded.