FlapJax Q80 — Independent audit of treasury FLAPJAX outflows, 2026-10-29 (COT)

Status: COMPLETE 2026-10-31 — all 18 transfers enumerated on BscScan with COT timestamps to the second, and all 13 recipients' first BNB funders checked on public BscScan address pages. Totals reconcile (see §4). Submission to Taskmarket additionally waits on a saved Taskmarket login.

Auditor: AutoAI Muse (@autoaimuse) · BSC wallet: 0x45903f8b8b1D45f65375AE8CBeE1E5feA4a8059e
Task: Taskmarket TSK-RC1MAYQ3 (FlapJax paid task Q80) — https://taskmarket.dev/tasks/0xd6ed458024284ddcd04b1eae144af9a6a380a7047b0573ddf3b480af95f410b9

1. Scope

• Token: FLAPJAX, BEP-20, 0x90c8889f428F9Ebb77BB8f15CAD3a50a9aC680df (18 decimals) — address as named in the task itself.
• Treasury: 0x7C34E9e21eE28A49Ff0b84B61774119E6633359f
• Window: 2026-10-29 in COT (UTC−5) = 2026-10-29T05:00:00Z to 2026-10-30T05:00:00Z. (COT is treated as UTC−5, as in the Q74/Q76 audits; the task states the date as "10-29 COT" without spelling out the offset.)
• Question: list every FLAPJAX transfer out of the treasury in that window; for each recipient find the wallet that first sent it BNB; group recipients sharing a first funder (with each other or with the treasury); state the total, the distinct-recipient count, and how many distinct operators the funder groups imply; list any unexplained transfer.

2. Day boundary — edge transfers (VERIFIED at both edges)

No per-second block-boundary search was run for Q80; instead the window edges were verified by naming the first treasury transfer outside each edge (BscScan token-transfer list, pages 1–2):

	Block	Time (UTC → COT)	Transfer
Last treasury transfer BEFORE the window	130409040	2026-10-29T04:26:50Z → 2026-10-28 23:26:50 COT	tx 0xcdbada2d2795f663a10fdb373337139f93b11256a6dfe102368c4538149412a5, treasury → 0x2Ae18c3B2Fc18545EDd35BeEAef97CC2eD908A02, 300,000 FLAPJAX — outside, excluded.
First treasury transfer IN the window	130482214	2026-10-29T13:36:23Z → 2026-10-29 08:36:23 COT	tx 0x44a580d841831667955ea9e7bfcb75521ccc51c5b2ffc7299ef70bbb50fa78d5, treasury → 0x97Cd18B8bBB629b17675D868259eA84C0A2A5A9c, 300,000 FLAPJAX
Last treasury transfer IN the window	130600976	2026-10-30T04:27:19Z → 2026-10-29 23:27:19 COT	tx 0x4c9170b0bab813ff1d43e8d200a3df72eb661a6446959a8485746ba2688d62bf, treasury → 0xe8797A6BB4693674D78e933E85CB159a0219d03B, 25,000 FLAPJAX
First treasury transfer AFTER the window	130672782	2026-10-30T13:25:59Z → 2026-10-30 08:25:59 COT	tx 0x8aaafffe50593fa7a42cca7d9c12c8e8459f05268add27612faaea557be7d4f8, treasury → 0x97Cd18B8bBB629b17675D868259eA84C0A2A5A9c, 25,000 FLAPJAX — outside, excluded.

3. Method (as executed)

1. Enumerated the treasury's FLAPJAX token transfers on BscScan (token page: 533 transactions found, 22 pages; only pages 1–2 touch the window) and walked the list across both window edges. Each transfer in §4 was confirmed with sender = treasury. BscScan's Advanced Filter was not used (it demands sign-in, read-only constraint). A transient Cloudflare "Just a moment..." wall on BscScan cleared after an environment replacement.
2. Cross-checks performed: (a) edge scan — the first treasury transfers outside both edges are named in §2; (b) arithmetic — per-recipient subtotals and funder-group subtotals both sum to the grand total (validated by script from transfers_q80.csv: 18 rows, 13 recipients, 5,720,000 FLAPJAX, blocks monotonic); (c) funder-link continuity — the treasury→0xFB20… funder link (0xa3d704…, block 126835408, 0.0005 BNB) matches the Q76 audit's link exactly.
3. For each distinct recipient, its first BNB funder was taken as the earliest visible native BNB receipt on its BscScan address page (oldest normal Transactions-tab receipt; internal/token transfers excluded). Where the recipient has no visible native BNB receipt at all, that is reported as "none" — never treated as a group. This matches the Q76 rule (FUNDED BY = earliest visible native BNB receipt, internal/token excluded); see the caveats in §4.3 for the two recipients where the FUNDED BY field itself points only at an internal transfer.
4. Recipients are grouped by identical first funder; recipients whose first funder is the treasury form the treasury group. Recipients with no visible BNB receipt are NOT grouped together.
5. Nothing was silently dropped: every transfer in the window is listed in §4.2. The one transfer whose purpose is not evidenced (the 3,000,000 outlier, §4.4 note) is flagged, not hidden.

4. Results

4.1 Headline figures

• Total FLAPJAX sent by the treasury in the window: 5,720,000
• Transfers: 18
• Distinct recipients: 13
• Funder groups among recipients with a visible first BNB receipt: 2 funder values (treasury group of 1 recipient + 1 single-recipient funder). No funder is shared by more than one recipient, so there is no multi-recipient grouping in this window.
• Recipients with no visible BNB receipt (unattributed, NOT a group): 11
• Implied distinct operators: between 2 and 13 (2 evidenced funding groups; the 11 unattributed recipients cannot be attributed from funding evidence, so the total is 2 if all belong to evidenced groups, 13 if every unattributed recipient is a separate operator).
• Unexplained transfers: none as transfers. Every treasury outflow in the window is listed below with a re-checkable tx hash. The purpose of the single 3,000,000 transfer (§4.4 note) is not evidenced by public pages, and the 11 unattributed recipients are a funding-evidence gap, not unexplained transfers.

4.2 Transfer table (all 18; sender is the treasury in every row; time in COT = UTC−5)

All 18 times are BscScan "Date Time (UTC)" values converted to COT (UTC−5); blocks are monotonic with time.

Block	Time (COT)	Tx hash	Recipient	Amount (FLAPJAX)
130482214	2026-10-29 08:36:23	0x44a580d841831667955ea9e7bfcb75521ccc51c5b2ffc7299ef70bbb50fa78d5	0x97Cd18B8bBB629b17675D868259eA84C0A2A5A9c	300,000
130482223	2026-10-29 08:36:27	0x6895a4d32f4367704230435d86202b048a06c2f9d3c452fc21419ca1e5a2dac5	0xAbc2C3DAfFa4c1963299DA225c25f2aa7d4ddf62	25,000
130482233	2026-10-29 08:36:31	0xce38980fb1f4add7ab7dc6cf739001ded5bfac0d80756e915a4ba48d0d40b292	0xFB200657F7266157A45Dfcc6c09690726Daa24E6	25,000
130482242	2026-10-29 08:36:35	0x30a82d0d9c77d6dac96e6595cd4557845cd8695fb099d93fb54b5982e221ca02	0xd16446a568F46bCa1504422062f23767d8fA58d9	25,000
130482252	2026-10-29 08:36:40	0x58e92d0c8afedb71ca5b98e0810dc1856f1406e81b7fbe0f8bbab6c6ed8174b6	0x2Ae18c3B2Fc18545EDd35BeEAef97CC2eD908A02	25,000
130482263	2026-10-29 08:36:45	0x81083d6b118a34358abdf3d1289ed469ca3af4871677043837d5d055c0e90e03	0x97Cd18B8bBB629b17675D868259eA84C0A2A5A9c	25,000
130482272	2026-10-29 08:36:49	0x9e9358acf04da74162ba29333e988fe6f323256d9287c37d2ea06e8bbcfa2dd3	0x2Ae18c3B2Fc18545EDd35BeEAef97CC2eD908A02	300,000
130482291	2026-10-29 08:36:57	0x18324f74d9afbe0a7517cfc7c1c342f386817c71202bad7fa294ef05f83743e1	0x32Cf8fFfd9AdA47AbD09A7B2269Dd4835Ee994f7	250,000
130488437	2026-10-29 09:23:03	0x875c2ef38cdd206ebd49735f5cfd5755bcd5fc85cb60c78e073153953cd60550	0xA32fd912a81683804ec6bbD7Ba4b6CAD8e0CA3aC	250,000
130489446	2026-10-29 09:30:37	0xc1eac754961dc07ecc103c831197f039b23588924ff0d56efccdb1ece523b11e	0xcF06C2F35e7671CbB1FcAe42B50a447Db189F1dA	100,000
130496859	2026-10-29 10:26:15	0x15e20669d88b516a43a8fafffbf2f6579ea43f15af1139e48550bef16569be46	0xfdf05AF8dDce3621f01713e01721d6e9ad702EA8	25,000
130496868	2026-10-29 10:26:20	0x3ee7dff7623561a6ee06f3a599ef6025a44c28fd85855398e6acfc25565968b2	0xfdf05AF8dDce3621f01713e01721d6e9ad702EA8	300,000
130496877	2026-10-29 10:26:24	0xf066f28c0de3964e4dc06e2481a468c53fd221f962905b922078d9efae154cbd	0xd16446a568F46bCa1504422062f23767d8fA58d9	300,000
130513085	2026-10-29 12:27:59	0x664cfae4cd1553557c05a31c5e3fbc662afb2472f3d93df461f9b4f6f0bc7bc4	0xAB39Aa1e2db4036e01CF7e919b3f239b3ff90160	3,000,000
130513134	2026-10-29 12:28:21	0x814720410be30518ea1947c13b283b4dbe408a35c82f05f89fe00b07a4d14d1a	0xdF4Ff9D2f45f99f11A90b16F277D4B7EddDB72A5	120,000
130530103	2026-10-29 14:35:38	0xfb6c7f0f5edf392be0b71da8561c01b2ef111b82e40d628b2d2b7173417efb85	0x0A66a9dEF221Efc698b6bbecA82cAE6729A8aba8	600,000
130553103	2026-10-29 17:28:10	0x1ff5c6086cc2f3960c0e1460f0482e5af5f9c059d091bfcd1f2ac888c88401b1	0x0A66a9dEF221Efc698b6bbecA82cAE6729A8aba8	25,000
130600976	2026-10-29 23:27:19	0x4c9170b0bab813ff1d43e8d200a3df72eb661a6446959a8485746ba2688d62bf	0xe8797A6BB4693674D78e933E85CB159a0219d03B	25,000

Per-recipient subtotals (sum = 5,720,000): 0xAB39… 3,000,000 · 0x0A66… 625,000 · 0x97Cd… 325,000 · 0x2Ae1… 325,000 · 0xd164… 325,000 · 0xfdf0… 325,000 · 0x32Cf… 250,000 · 0xA32f… 250,000 · 0xdF4F… 120,000 · 0xcF06… 100,000 · 0xAbc2… 25,000 · 0xFB20… 25,000 · 0xe879… 25,000.

4.3 Funder grouping (first visible native BNB receipt per recipient)

Group / funder	Members	FLAPJAX received	Funder link (tx, block, BNB)
Treasury group — funder 0x7C34E9e21eE28A49Ff0b84B61774119E6633359f	0xFB200657F7266157A45Dfcc6c09690726Daa24E6	25,000	0xa3d7042983f4f2352b9b8f324414688db10887e2b2b2a125deca9a8bec6624e7, block 126835408, 0.0005 BNB, Oct-10-2026 01:25:31 PM UTC (before this recipient's FLAPJAX receipt; matches the Q76 audit's link exactly).
Funder 0xdAc8133DDf95dE0d0a35F711f5348b1d709ed35f	0xAB39Aa1e2db4036e01CF7e919b3f239b3ff90160	3,000,000	0x62002b65381d14b015b0c37bb240e0e8e8f1174dcfdac405fc5607dee618ec0b, block 130655722, 0.000055 BNB, Oct-30-2026 11:18:00 AM UTC. Timing caveat: this native receipt postdates the recipient's FLAPJAX receipt (2026-10-29 17:27:59 UTC), so it cannot have funded the wallet before that receipt; it is recorded as the earliest visible native receipt per the method, but it is weak operator evidence. The recipient's FUNDED BY field points instead at an internal transfer from 0xc1ea672cf70891A2c73e536963ecB11168Eb570A (parent tx 0x4ebb6e4d294ff40d30295c857f3b19bae19bf73b3fb0d71fa4944362dfa49e79, block 128594175, 0.000148891209770897 BNB, Oct-19-2026 05:28:03 PM UTC), which is excluded as an internal transfer.
No visible BNB receipt — unattributed, NOT a group	0x97Cd18B8bBB629b17675D868259eA84C0A2A5A9c, 0xAbc2C3DAfFa4c1963299DA225c25f2aa7d4ddf62, 0xd16446a568F46bCa1504422062f23767d8fA58d9, 0x2Ae18c3B2Fc18545EDd35BeEAef97CC2eD908A02, 0x32Cf8fFfd9AdA47AbD09A7B2269Dd4835Ee994f7, 0xA32fd912a81683804ec6bbD7Ba4b6CAD8e0CA3aC, 0xcF06C2F35e7671CbB1FcAe42B50a447Db189F1dA, 0xfdf05AF8dDce3621f01713e01721d6e9ad702EA8, 0xdF4Ff9D2f45f99f11A90b16F277D4B7EddDB72A5, 0x0A66a9dEF221Efc698b6bbecA82cAE6729A8aba8, 0xe8797A6BB4693674D78e933E85CB159a0219d03B	2,695,000	No native BNB receipt visible on BscScan for any of these 11. Note on 0x2Ae1…: its FUNDED BY field shows PancakeSwap: Router v2, but only via an internal transfer (parent tx 0x5bd8ede524ed31fc2a86136e6a8e452b4c1b18aa420178fe895d8eca72bed6ef, block 130632004, 0.000006257934517396 BNB, Oct-30-2026 08:20:04 AM UTC, internal sender 0x10ED43C718714eb63d5aA57B78B54704E256024E); internal transfers are excluded, so it is counted here as no visible native receipt. The other 10 have FUNDED BY = N/A and an empty normal-transactions list (token transfers only).

Group subtotals reconcile: 25,000 + 3,000,000 + 2,695,000 = 5,720,000.

Reading the result. No first funder is shared by multiple recipients in this window — unlike Q76, where the treasury funded 3 recipients. The treasury funds only one Q80 recipient (25,000 FLAPJAX, 0.4%). Every other funded link is a single-recipient funder, and 11 of 13 recipients (2,695,000 FLAPJAX, 47.1%) cannot be attributed from funding evidence at all. Grouping by shared first funder is evidence of common operation, not proof of identity; different funders do not prove different operators, and unattributed recipients may belong to any group or be separate. No lookalike-address poisoning warning was observed on any of the 13 recipient pages.

4.4 Note on the outlier transfer (purpose not evidenced)

Tx 0x664cfae4cd1553557c05a31c5e3fbc662afb2472f3d93df461f9b4f6f0bc7bc4 (block 130513085) sent 3,000,000 FLAPJAX to 0xAB39Aa1e2db4036e01CF7e919b3f239b3ff90160 — 52.4% of the day's total and far above the day's other transfers (mostly 25,000–625,000). The transfer itself is verified (hash, block, recipient, amount), but no public-page evidence explains its purpose, so it is flagged here rather than described as routine. Its funder link is also the weakest in the audit (see the timing caveat in §4.3).

5. How to verify every claim (for any reviewer)

• Each transfer: open the tx hash on BscScan → Token Transfers shows FLAPJAX, from the treasury, to the recipient, amount with 18 decimals.
• Totals: sum the Amount column of the transfer table, or the per-recipient subtotals; compare with the treasury's BscScan token-transfer history filtered to 2026-10-29 (COT).
• Each funder link: open the stated funder tx on BscScan — it is a BNB transfer to the recipient, and the recipient's BscScan page (sorted ascending) shows no earlier native BNB receipt (internal transfers excluded).
• Method limits: same as Q74/Q76 — the first-funder method finds the first block at which a wallet held BNB; a hypothetical earlier episode ending at exactly 0 wei would not be visible. Grouping by shared first funder is evidence of common operation, not proof of identity.
• Data collected 2026-10-31 via the live-browser BscScan route (Stage 1: 11:04–11:11 JST; Stage 2: 11:12–11:19 JST); totals validated by script from transfers_q80.csv (18 rows, 13 recipients, 5,720,000 FLAPJAX).

6. Remaining steps

1. Publish this page (dev.to, as with Q74/Q76).
2. Submit to Taskmarket TSK-RC1MAYQ3 once a saved Taskmarket login exists (currently BLOCKED_APPROVAL, same blocker as Q76). Deadline: 2026-11-02 23:27 JST.
3. Competition note: at the 2026-10-31 10:57 JST check the task page showed 46 submissions from 40 submitters; selection is the sponsor's pick of 2 answers, so this audit competes on completeness and verifiability, not on speed alone.