// the find
orca-so/whirlpools
Open source concentrated liquidity AMM contract on Solana
Whirlpools is the on-chain concentrated liquidity AMM that powers Orca, one of Solana's largest DEXes. The contract is live and handling real money — this isn't a toy. It's useful to anyone building Solana DeFi tooling: bots, aggregators, protocols that need a CLMM they can integrate against rather than build from scratch.
Six independent security audits in three years, with the most recent one in August 2025 — that's a serious audit cadence for an open-source project. The monorepo ships both TypeScript and Rust SDKs at multiple abstraction levels (high-level, auto-generated client, math primitives), so you can go as deep as you need without rolling your own. Adaptive fee tiers are implemented, meaning the protocol can respond to volatility rather than charging a flat rate. Verifiable builds via Solana Verify CLI mean you can confirm the deployed bytecode matches this exact source.
The legacy SDK (`@orca-so/whirlpools-sdk`) is still the only option if your project uses Web3.js — that's a real constraint since Web3.js is still dominant in the ecosystem, and the new SDK requiring a migration is friction most existing integrators will avoid for a while. The NX monorepo setup is genuinely complex: building requires exact Anchor v0.32.1 and Solana v2.1.0 toolchain versions, and diverging from those will cost you hours. The documentation lives in a separate Docusaurus site (`dev.orca.so`) rather than in the repo, which means the README is thin on actual usage examples and you're immediately dependent on an external resource. Token extension support exists but spans both v1 and v2 instruction namespaces in the legacy SDK, creating a confusing API surface that isn't well-explained inline.