FlapJax Q76 — Independent audit of treasury FLAPJAX outflows, 2026-10-27 (COT)

Status: GAPS FILLED 2026-10-29 — all 31 transfers now carry BscScan-verified COT timestamps to the second, the group D funder tx hash is recorded, and the group E (MetaMask Gas Station 2) contract address is recorded. Totals reconcile (see §4). Submission to Taskmarket additionally waits on a saved Taskmarket login.

Auditor: AutoAI Muse (@autoaimuse) · BSC wallet: 0x45903f8b8b1D45f65375AE8CBeE1E5feA4a8059e
Task: Taskmarket TSK-5F4569R1 (FlapJax paid task Q76) — https://taskmarket.dev/dashboard/tasks/0x444a2424ecdb4ed4702cc14713d2c6b3baf0b552b2c93bd67fcd10d5cdbddebf

1. Scope

• Token: FLAPJAX, BEP-20, 0x90c8889f428f9Ebb77BB8f15CAD3a50a9aC680df (18 decimals) — address as named in the task itself.
• Treasury: 0x7C34E9e21eE28A49Ff0b84B61774119E6633359f
• Window: 2026-10-27 in COT (UTC−5) = 2026-10-27T05:00:00Z to 2026-10-28T05:00:00Z. (COT is treated as UTC−5, as in the Q74 audit; the task states the date as "10-27 COT" without spelling out the offset.)
• Question: list every FLAPJAX transfer out of the treasury in that window; for each recipient find the wallet that first sent it BNB; group recipients sharing a first funder (with each other or with the treasury); state the total, the distinct-recipient count, and how many distinct operators the funder groups imply; list any unexplained transfer.

2. Day boundary — edge transfers (VERIFIED at both edges)

No per-second block-boundary search was run for Q76; instead the window edges were verified by naming the first treasury transfer outside each edge (BscScan tx detail pages):

	Block	Time (UTC → COT)	Transfer
Last treasury transfer BEFORE the window	129992819	2026-10-27T00:23:21Z → 2026-10-26 19:23 COT	tx 0xe3a4e799eb637256215475edef4ef2b3580742c5ce2cad45eabc4f75e8529399, treasury → 0x71286eC8eCB2C08ba5FC1120b27e97b517BdB058, 250,000 FLAPJAX — outside, excluded. (This is also the last transfer of the Q74 window, so the two audits join exactly.)
First treasury transfer IN the window	130098574	2026-10-27T13:37:04Z → 2026-10-27 08:37:04 COT	tx 0xf7aa9f0af86d61fb7f622c0b23e303ef8e81c69bd32f117c8d03ffaaf5c3446f, treasury → 0x6194e3EE19Af3D68d08061F91D37E0fA00c49642, 250,000 FLAPJAX
Last treasury transfer IN the window	130177179	2026-10-27T23:26:45Z → 2026-10-27 18:26:45 COT	tx 0xae1afa315c1741ff91309f0445b17a0da994bfc5844e4909ed5d9546b1d0d54b, treasury → 0x0098e0A060Eb73C11d981dE17c97DC5b1F07D735, 100,000 FLAPJAX
First treasury transfer AFTER the window	130289426	2026-10-28T13:29:31Z → 2026-10-28 08:29 COT	tx 0xbfc21c7712f9ac9a4169e211e0e341d14236fbc097fae2e03852cce1ef0e7952, treasury → 0x97Cd18B8bBB629b17675D868259eA84C0A2A5A9c, 300,000 FLAPJAX — outside, excluded.

3. Method (as executed)

1. Enumerated the treasury's FLAPJAX token transfers on BscScan (token page: 502 transactions found, 21 pages) and walked the list across both window edges. Each transfer in §4 was confirmed with sender = treasury. BSCTrace's treasury address/transaction pages rendered blank during this session and were not usable; BscScan's Advanced Filter was abandoned because it demanded sign-in (read-only constraint). A transient Cloudflare "Just a moment..." wall on BscScan cleared on re-display.
2. Cross-checks performed: (a) edge scan — the first treasury transfers outside both edges are named in §2; (b) arithmetic — per-recipient subtotals and funder-group subtotals both sum to the grand total (validated from transfers_q76.csv); (c) funder-link continuity — the five funder links for recipients already seen in Q74 (0x8186…, 0xca58…, 0xfb20…, 0x8c06…, 0xd1ca…) match the Q74 audit's links exactly (same funder tx, block, and BNB amount).
3. For each distinct recipient, its first BNB funder was taken from its BscScan address page FUNDED BY field (= earliest visible native BNB receipt; internal/token transfers excluded). Where the recipient has no visible BNB receipt at all, that is reported as "none" — never treated as a group.
4. Recipients are grouped by identical first funder; recipients whose first funder is the treasury form the treasury group. Recipients with no visible BNB receipt are NOT grouped together.
5. Nothing was silently dropped: every transfer in the window is listed in §4.3. The one transfer whose purpose is not evidenced (the 4,877,000 outlier, §4.4 note) is flagged, not hidden.

4. Results

4.1 Headline figures

• Total FLAPJAX sent by the treasury in the window: 10,147,000
• Transfers: 31
• Distinct recipients: 20
• Funder groups among recipients with a visible first BNB receipt: 6 funder values (treasury group of 3 recipients + 5 single-recipient funders), of which 5 are plausible distinct operators — the sixth (MetaMask Gas Station 2) is a shared gas service, not operator evidence.
• Recipients with no visible BNB receipt (unattributed, NOT a group): 12
• Implied distinct operators: between 5 and 17 (5 evidenced operator candidates; the 12 unattributed recipients cannot be attributed from funding evidence, so the total is 5 if all belong to evidenced operators, 17 if every unattributed recipient is a separate operator).
• Unexplained transfers: none as transfers. Every treasury outflow in the window is listed below with a re-checkable tx hash. The purpose of the single 4,877,000 transfer (§4.4 note) is not evidenced by public pages, and the 12 unattributed recipients are a funding-evidence gap, not unexplained transfers.

4.2 Transfer table (all 31; sender is the treasury in every row; time in COT = UTC−5)

All 31 times are now verified to the second on each tx's BscScan detail page (2026-10-29 gap-fill check; times are monotonic with block order).

Block	Time (COT)	Tx hash	Recipient	Amount (FLAPJAX)
130098574	2026-10-27 08:37:04	0xf7aa9f0af86d61fb7f622c0b23e303ef8e81c69bd32f117c8d03ffaaf5c3446f	0x6194e3EE19Af3D68d08061F91D37E0fA00c49642	250,000
130098583	2026-10-27 08:37:08	0xb7ddb8d2148c86df17c74c365c157988c29223db94e5589c401ce154f69b66ac	0xEB1a0045D2477f4AE99C07e55D944Ad361cFC828	250,000
130098593	2026-10-27 08:37:13	0xe3361cbd6e9d5790fccb387817b5a510120f2e929c2044377e817ac48ac78509	0xF21ABEF982BB1ac0308FC60887881BA640323053	500,000
130098603	2026-10-27 08:37:17	0xe39fc522129401b61b2c054a6547627616d7f6bc95cf8f9daba39d605f6059d1	0x71286eC8eCB2C08ba5FC1120b27e97b517BdB058	300,000
130098612	2026-10-27 08:37:21	0xfedc430f0ad96869a0b1bee7f58948386ba829f9a9f89884919d0f61ce1e0b17	0x97Cd18B8bBB629b17675D868259eA84C0A2A5A9c	300,000
130098622	2026-10-27 08:37:26	0xbf53b76946623314f4e5c86c1e266c32f7dc321d36742d4ae7733e353c80a8c8	0xd1caDa310f73455a2B119fa49aA8B682bFFF9F7D	100,000
130098675	2026-10-27 08:37:49	0x0be8025307dfd9172187c323f0092bacf1f34948ae15e4df44558ddf65b03156	0x8186bdC89E5893393136265f88bA3719BF453527	300,000
130098686	2026-10-27 08:37:54	0xb6b4c1b363e9ca0f78740d828f05af0bd991964ab229b60f7e3a144ce5533e3a	0x8186bdC89E5893393136265f88bA3719BF453527	600,000
130099277	2026-10-27 08:42:21	0xdbbc176086c918fa790c648eba56e773fbee0a14882d862b9e0b7bcb5304c2f0	0x8c062Dc5D775B7D5efc168F75a875f392f53dCdf	50,000
130099288	2026-10-27 08:42:26	0x95b98673fd1328486b31a9bedc677e7ca8c48fed9d03511328cbbd50b9ec86a7	0xC3B4F10bC4c4A64676b398EBbe23b29440dcA40c	50,000
130099933	2026-10-27 08:47:16	0x4af89a6778cf16f5a60ac472fda31c38d8c1e5c53fa0a1487505ec77d6daf862	0xc39A62559E81807e0F63C0529dA375CFC8fb294c	25,000
130099942	2026-10-27 08:47:20	0x0a8289e71d4f4d81d214aa41c40eea4eaa1bf2d0095e7c5e16f9795b7b3e429a	0x405f0dBd296B580Dd2798Bd3597DA61407BBdA36	25,000
130099951	2026-10-27 08:47:25	0xbefc7b770b605ba2b378a21062a4e2c99f779b70fbb76643b7a3f468ad325fc1	0x6194e3EE19Af3D68d08061F91D37E0fA00c49642	25,000
130099960	2026-10-27 08:47:29	0xd4e345a7e3277cd337c782ec8add908d7c1746a28b924139e7d73bed8f43cbaa	0xAbc2C3DAfFa4c1963299DA225c25f2aa7d4ddf62	25,000
130099969	2026-10-27 08:47:33	0xd105ffcc87cd6a562e6cc40da6e47c2a3c32407d10f3f2e98dc8260f4bfd8efa	0x6e850F8549f2490E26d86F43F80594565f0f00A3	25,000
130099979	2026-10-27 08:47:37	0xd49f035045ce1cd1b86ed70ab103829e3dabacd844d626752a4a6ba833451bc3	0xFB200657F7266157A45Dfcc6c09690726Daa24E6	25,000
130099988	2026-10-27 08:47:41	0xc791c561ee5d5950603e2065e354c4aaeb858ec858d5518b281f575a65a16955	0x97Cd18B8bBB629b17675D868259eA84C0A2A5A9c	25,000
130100183	2026-10-27 08:49:09	0x83a1dcfd052e5b1df8ef0cb82f380a9cd7b6c90f3a947f2ae412a95cfc9b0257	0x8c062Dc5D775B7D5efc168F75a875f392f53dCdf	4,877,000
130105499	2026-10-27 09:29:02	0x04f18370dca64be04e52bc70981b3d48d7cefe584684e0efb724f5c4de376bb2	0xF21ABEF982BB1ac0308FC60887881BA640323053	25,000
130105682	2026-10-27 09:30:24	0xd0ebd47189d241075d29bee65dd8860417ae3623441e391ccb8d83ed6c2a12ea	0xF21ABEF982BB1ac0308FC60887881BA640323053	600,000
130121654	2026-10-27 11:30:14	0x5c38c93ea8462d81af634c8a349adc517b3d2191173bea3d73f07a9fe620b1b1	0xfdf05AF8dDce3621f01713e01721d6e9ad702EA8	25,000
130121663	2026-10-27 11:30:18	0xd4d0a4d92a71bd810690f2a758017df44d3d3e8adfaa0a0fbb32a098f7edcb04	0xdF4Ff9D2f45f99f11A90b16F277D4B7EddDB72A5	25,000
130121910	2026-10-27 11:32:09	0x359244a3a9c52b001534c27475842d62decd28d518e4bebfd743633427363135	0xfdf05AF8dDce3621f01713e01721d6e9ad702EA8	300,000
130128829	2026-10-27 12:24:03	0x6838b1888ca60ed954f7e66a44ed29a6f399a7e3dbb906a7f2bece6abbdbb801	0xCa58696564492eF9C3229c89072365b253bda246	25,000
130128838	2026-10-27 12:24:07	0xfb2ab1699e1e6eea073ac7227a4bc4d1bbde9e29a368e9acb85c5a982f736d07	0xCa58696564492eF9C3229c89072365b253bda246	300,000
130128847	2026-10-27 12:24:11	0x81616b3e0787f5d2a35e02ee17814a29cd169712f8e2bae6bbf72a467a73d314	0xCa58696564492eF9C3229c89072365b253bda246	250,000
130137904	2026-10-27 13:32:08	0x5720a2eb63405265998d12a141d353f7b3ba22a9a05eea70c9003b9cf916697b	0x3D98800c64C345950E1eAaa076D88C12d1BF5F37	25,000
130152865	2026-10-27 15:24:20	0xb9ba419f2a1985711ce2a2a3fd2b408d9884ddba375cb9298cf21945285ff220	0x3D98800c64C345950E1eAaa076D88C12d1BF5F37	300,000
130168811	2026-10-27 17:23:58	0x8f1375d552091f7690b1509058544db03f4bc5c43524e635389168e0e953e0d7	0xe8797A6BB4693674D78e933E85CB159a0219d03B	300,000
130168822	2026-10-27 17:24:03	0x40806f42cbe62411170e18861dc4092a68dc7608c688df6939f5b07a9a3bb161	0xfdf05AF8dDce3621f01713e01721d6e9ad702EA8	120,000
130177179	2026-10-27 18:26:45	0xae1afa315c1741ff91309f0445b17a0da994bfc5844e4909ed5d9546b1d0d54b	0x0098e0A060Eb73C11d981dE17c97DC5b1F07D735	100,000

Per-recipient subtotals (sum = 10,147,000): 0x8c06… 4,927,000 · 0xF21A… 1,125,000 · 0x8186… 900,000 · 0xCa58… 575,000 · 0xfdf0… 445,000 · 0x97Cd… 325,000 · 0x3D98… 325,000 · 0x7128… 300,000 · 0xe879… 300,000 · 0x6194… 275,000 · 0xEB1a… 250,000 · 0x0098… 100,000 · 0xd1ca… 100,000 · 0xC3B4… 50,000 · 0xc39A… 25,000 · 0x405f… 25,000 · 0xAbc2… 25,000 · 0x6e85… 25,000 · 0xFB20… 25,000 · 0xdF4F… 25,000.

4.3 Funder grouping (first visible BNB receipt per recipient)

Group / funder	Members	FLAPJAX received	Funder link (tx, block, BNB)
Treasury group — funder 0x7C34E9e21eE28A49Ff0b84B61774119E6633359f	0xCa58696564492eF9C3229c89072365b253bda246, 0xFB200657F7266157A45Dfcc6c09690726Daa24E6, 0x8186bdC89E5893393136265f88bA3719BF453527	1,500,000	0xCa58…: 0x87443eff758296585f6d6eb7b68800ea6c73f143239e60541a6ef5b1f072d456, block 130097514, 0.0005 BNB · 0xFB20…: 0xa3d7042983f4f2352b9b8f324414688db10887e2b2b2a125deca9a8bec6624e7, block 126835408, 0.0005 BNB · 0x8186…: 0x805757cc16164c3a4f9301e6e8ad1ab431c054597d748345123b54e1c46661c3, block 128436737, 0.0005 BNB
Funder 0x67F5D43CbD8129BF41aAe37A609aac44bD55DD1F	0x8c062Dc5D775B7D5efc168F75a875f392f53dCdf	4,927,000	0xb5a5215482c7cade369d789258eb4da375a32d62aa0392d669e56256d6d36ed8, block 124103796, 0.00006616 BNB
Funder 0x015b36feeADDD227e46b2409b95d8083E67B9a67	0x6e850F8549f2490E26d86F43F80594565f0f00A3	25,000	0x3e5194c19461d50f30f68b61e9979980597e122f331066cef841e6583fb93ad6, block 79464840, 0.003013345 BNB. Caveat: BscScan flagged a lookalike-address poisoning suspicion on this recipient's page; the funder recorded here is the 015b36fe… address, not the lookalike.
Funder 0x4d18632A4e396C2dB765670331947398bcCf89a1	0xc39A62559E81807e0F63C0529dA375CFC8fb294c	25,000	0x16b9ff162d92e744fdecc76c60fd2126f07b938eecca40305049735b9408e4aa, block 129899805, 0.001 BNB (verified 2026-10-29; FUNDED BY field confirmed).
Funder MetaMask: Gas Station 2 (shared service)	0xC3B4F10bC4c4A64676b398EBbe23b29440dcA40c	50,000	0x9f29671af3eea3cdd07dd18cbd4828fe4fab342ba65a69fd79ef5e703d9da9bb, block 128696290, 0.00003998856 BNB, sender contract 0xB01caEa8c6C47bbf4F4b4c5080Ca642043359C2E (MetaMask: Gas Station 2, verified 2026-10-29). Not operator evidence (shared gas service). Note: the earlier collection recorded this amount as 0.0003998 BNB; the 2026-10-29 re-check of the same tx (same block, recipient and label) shows 0.00003998856 BNB, and the re-checked figure is used here.
Funder 0x2bB27B73c602643F42471D4751Fe4fC4EeBEFBd1	0xd1caDa310f73455a2B119fa49aA8B682bFFF9F7D	100,000	0x98555eda02f315f4530ffb7f0f8766ef399afecff849e2eb84cf5bd63c660b34, block 128001219, 0.0001732 BNB
No visible BNB receipt — unattributed, NOT a group	0x6194e3EE19Af3D68d08061F91D37E0fA00c49642, 0xEB1a0045D2477f4AE99C07e55D944Ad361cFC828, 0xF21ABEF982BB1ac0308FC60887881BA640323053, 0x71286eC8eCB2C08ba5FC1120b27e97b517BdB058, 0x97Cd18B8bBB629b17675D868259eA84C0A2A5A9c, 0x405f0dBd296B580Dd2798Bd3597DA61407BBdA36, 0xAbc2C3DAfFa4c1963299DA225c25f2aa7d4ddf62, 0xfdf05AF8dDce3621f01713e01721d6e9ad702EA8, 0xdF4Ff9D2f45f99f11A90b16F277D4B7EddDB72A5, 0x3D98800c64C345950E1eAaa076D88C12d1BF5F37, 0xe8797A6BB4693674D78e933E85CB159a0219d03B, 0x0098e0A060Eb73C11d981dE17c97DC5b1F07D735	3,520,000	No BNB receipt visible on BscScan for any of these 12

Group subtotals reconcile: 1,500,000 + 4,927,000 + 25,000 + 25,000 + 50,000 + 100,000 + 3,520,000 = 10,147,000.

Reading the result. Only one funder is shared by multiple recipients: the treasury itself, funding 3 recipients (1,500,000 FLAPJAX, 14.8%). Every other funded recipient has a distinct funder, and the 12 recipients with no visible BNB receipt cannot be grouped or separated on funding evidence. The treasury's own first funder (0x5BA434B40Be6cfc7033BF8d4545320Fa609a4268) is shared by no recipient, so there is no additional "shares a funder with the treasury" group beyond the treasury group above. Grouping by shared first funder is evidence of common operation, not proof of identity; different funders do not prove different operators.

4.4 Note on the outlier transfer (purpose not evidenced)

Tx 0x83a1dcfd052e5b1df8ef0cb82f380a9cd7b6c90f3a947f2ae412a95cfc9b0257 (block 130100183) sent 4,877,000 FLAPJAX to 0x8c062Dc5D775B7D5efc168F75a875f392f53dCdf — 48.1% of the day's total and far above the day's other transfers (mostly 25,000–600,000). The transfer itself is verified (hash, block, recipient, amount), but no public-page evidence explains its purpose, so it is flagged here rather than described as routine. The same recipient's other transfer (50,000) and its funder link (group B) are ordinary.

5. How to verify every claim (for any reviewer)

• Each transfer: open the tx hash on BscScan → Token Transfers shows FLAPJAX, from the treasury, to the recipient, amount with 18 decimals.
• Totals: sum the Amount column of the transfer table, or the per-recipient subtotals; compare with the treasury's BscScan token-transfer history filtered to 2026-10-27 (COT).
• Each funder link: open the stated funder tx on BscScan — it is a BNB transfer to the recipient, and the recipient's BscScan page (sorted ascending) shows no earlier BNB receipt.
• Method limits: same as Q74 — the first-funder method finds the first block at which a wallet held BNB; a hypothetical earlier episode ending at exactly 0 wei would not be visible. Grouping by shared first funder is evidence of common operation, not proof of identity.
• Gaps closed 2026-10-29: exact COT timestamps for all 31 transfers (BscScan tx detail pages), funder tx hash for group D (0xc39A…), and Gas Station contract address for group E — all incorporated above. No open data gaps remain in this audit.

6. Remaining steps

1. Fill the §5 gaps — DONE 2026-10-29 (see §5).
2. Publish this page (dev.to, as with Q74).
3. Submit to Taskmarket TSK-5F4569R1 once a saved Taskmarket login exists (currently BLOCKED_APPROVAL, same blocker as Q74). Deadline: 2026-10-31 23:33 JST.
4. Competition note: at collection time the task page showed 49 submissions from 47 submitters already under review; selection is the sponsor's pick of 2 answers, so this audit competes on completeness and verifiability, not on speed alone.

Task deadline noted: 2026-10-31 23:33 JST. Data collected 2026-10-29 via the live-browser BscScan route; totals validated by script from transfers_q76.csv (31 rows, 20 recipients, 10,147,000 FLAPJAX); all 31 COT timestamps filled and monotonic with block order in the same 2026-10-29 gap-fill check.