DEV Community

Cian
Cian

Posted on

Auditing a BEP-20 treasury from the chain alone: 27 transfers, 17 recipients, 5 funding origins

Chain-only audit of every FLAPJAX transfer out of the FlapJax treasury on
2026-10-26 COT, and of who first funded each recipient with BNB.

  • Token: 0x90c8889f428F9Ebb77BB8f15CAD3a50a9aC680df (FLAPJAX, BEP-20, BSC)
  • Treasury: 0x7C34E9e21eE28A49Ff0b84B61774119E6633359f
  • First block of 10-26 COT: 129,837,825 (2026-10-26 05:00:00 UTC)
  • Last block of 10-26 COT: 130,029,689 (2026-10-27 04:59:59 UTC)
  • Transfers: 27 out, 17 distinct recipients
  • Total sent: 18,190,000 FLAPJAX

Method

Logs: eth_getLogs filtered on address=token, topic0 Transfer,
topic1 = the treasury as sender, over the 191,865 blocks of the day. Free public RPCs
cap the range (bsc-dataseed answers limit exceeded at one block, 1rpc caps at 50),
so the scan ran as four 50,000-block chunks against bsc-mainnet.nodereal.io with
tools/onchain/getlogs_scan.py, which fails loudly on a partial scan.

First funder: nr_getAssetTransfers with toAddress=<recipient>, order=asc,
maxCount=1, excludeZeroValue=true, over external and internal categories.
That returns the earliest native BNB transfer into the address. Amounts use 18
decimals. Raw logs kept at zero/data/flapjax-out-2026-10-26.json.

Every transfer out

# block time (COT) recipient FLAPJAX tx
1 129,845,462 2026-10-26 00:57:17 0x3d98800c64c345950e1eaaa076d88c12d1bf5f37 10,000 0x2a1693f8…
2 129,845,470 2026-10-26 00:57:20 0x8c062dc5d775b7d5efc168f75a875f392f53dcdf 10,000 0xec7980a5…
3 129,845,478 2026-10-26 00:57:24 0xca58696564492ef9c3229c89072365b253bda246 10,000 0xf47b698a…
4 129,845,485 2026-10-26 00:57:27 0xdf4ff9d2f45f99f11a90b16f277d4b7edddb72a5 10,000 0x6f5bf266…
5 129,845,494 2026-10-26 00:57:31 0xfd08fc471cce17b7ecbfaf8b8e3f44257f710c4d 10,000 0xd2839e9c…
6 129,845,550 2026-10-26 00:57:56 0x8c062dc5d775b7d5efc168f75a875f392f53dcdf 20,000 0x882f4040…
7 129,906,119 2026-10-26 08:32:57 0xdf4ff9d2f45f99f11a90b16f277d4b7edddb72a5 600,000 0x796d196f…
8 129,906,128 2026-10-26 08:33:01 0xdf4ff9d2f45f99f11a90b16f277d4b7edddb72a5 300,000 0x4c21cb67…
9 129,906,138 2026-10-26 08:33:05 0x874eca1c49e327fceeb6e199f4e9b09214490367 300,000 0x2e5c3b1d…
10 129,906,147 2026-10-26 08:33:10 0xe4bc17f7f9537dd5933bf33ed52802d89130fe9c 2,000,000 0x270095f1…
11 129,906,179 2026-10-26 08:33:24 0x702c71dcf35aebf2b4f6256a7a5e3e4e222a9e4a 300,000 0x7bd9c7a5…
12 129,906,285 2026-10-26 08:34:12 0x89cd8c588b7f899f0d42cbb2e4d4d0480fb2526b 300,000 0x6aba6856…
13 129,906,295 2026-10-26 08:34:16 0x93ec57b97d3be3c4835bb29d8e77c3b2c001a9d6 300,000 0xd85cec7f…
14 129,913,201 2026-10-26 09:26:05 0x8186bdc89e5893393136265f88ba3719bf453527 2,000,000 0xfd48998c…
15 129,913,233 2026-10-26 09:26:20 0x8186bdc89e5893393136265f88ba3719bf453527 2,000,000 0x08930fe7…
16 129,913,244 2026-10-26 09:26:25 0x8186bdc89e5893393136265f88ba3719bf453527 3,000,000 0x2ad37ce4…
17 129,913,252 2026-10-26 09:26:28 0xf8ab1eefdb3f86ee34a71d765be44e1ffc35300f 2,000,000 0x6d7dd14e…
18 129,913,262 2026-10-26 09:26:33 0xca58696564492ef9c3229c89072365b253bda246 3,000,000 0x80f3d226…
19 129,917,707 2026-10-26 09:59:54 0x0a66a9def221efc698b6bbeca82cae6729a8aba8 250,000 0x95b52a02…
20 129,918,133 2026-10-26 10:03:06 0xd1cada310f73455a2b119fa49aa8b682bfff9f7d 500,000 0x64b6e2a4…
21 129,918,143 2026-10-26 10:03:10 0xd1cada310f73455a2b119fa49aa8b682bfff9f7d 250,000 0x1e7bbe6a…
22 129,918,152 2026-10-26 10:03:14 0xd1cada310f73455a2b119fa49aa8b682bfff9f7d 250,000 0x9fab468c…
23 129,921,021 2026-10-26 10:24:46 0xfdf05af8ddce3621f01713e01721d6e9ad702ea8 50,000 0x4d540008…
24 129,929,849 2026-10-26 11:30:59 0x702c71dcf35aebf2b4f6256a7a5e3e4e222a9e4a 120,000 0x82a6bd4d…
25 129,983,997 2026-10-26 18:17:10 0xe4bc17f7f9537dd5933bf33ed52802d89130fe9c 300,000 0x40015c12…
26 129,984,099 2026-10-26 18:17:56 0xfb200657f7266157a45dfcc6c09690726daa24e6 50,000 0xbeaa8aad…
27 129,992,819 2026-10-26 19:23:21 0x71286ec8ecb2c08ba5fc1120b27e97b517bdb058 250,000 0xe3a4e799…

First BNB funder per recipient

recipient FLAPJAX received first BNB funder funder tx funder block
0x8186bdc89e5893393136265f88ba3719bf453527 7,000,000 0x7c34e9e21ee28a49ff0b84b61774119e6633359f 0x805757cc… 128,436,737
0xca58696564492ef9c3229c89072365b253bda246 3,010,000 0x7c34e9e21ee28a49ff0b84b61774119e6633359f 0x87443eff… 130,097,514
0xe4bc17f7f9537dd5933bf33ed52802d89130fe9c 2,300,000 0x5be10189f009334aacae23d7102d64527e32bbdb 0x95f65341… 130,000,321
0xf8ab1eefdb3f86ee34a71d765be44e1ffc35300f 2,000,000 no BNB ever received
0xd1cada310f73455a2b119fa49aa8b682bfff9f7d 1,000,000 0x2bb27b73c602643f42471d4751fe4fc4eebefbd1 0x98555eda… 128,001,219
0xdf4ff9d2f45f99f11a90b16f277d4b7edddb72a5 910,000 no BNB ever received
0x702c71dcf35aebf2b4f6256a7a5e3e4e222a9e4a 420,000 no BNB ever received
0x874eca1c49e327fceeb6e199f4e9b09214490367 300,000 0xcc4ca271a3738b8f95a91defcd66418aef9c4f80 0x8f43e0ce… 129,631,108
0x89cd8c588b7f899f0d42cbb2e4d4d0480fb2526b 300,000 no BNB ever received
0x93ec57b97d3be3c4835bb29d8e77c3b2c001a9d6 300,000 no BNB ever received
0x0a66a9def221efc698b6bbeca82cae6729a8aba8 250,000 no BNB ever received
0x71286ec8ecb2c08ba5fc1120b27e97b517bdb058 250,000 no BNB ever received
0xfb200657f7266157a45dfcc6c09690726daa24e6 50,000 0x7c34e9e21ee28a49ff0b84b61774119e6633359f 0xa3d70429… 126,835,408
0xfdf05af8ddce3621f01713e01721d6e9ad702ea8 50,000 no BNB ever received
0x8c062dc5d775b7d5efc168f75a875f392f53dcdf 30,000 0x67f5d43cbd8129bf41aae37a609aac44bd55dd1f 0xb5a52154… 124,103,796
0x3d98800c64c345950e1eaaa076d88c12d1bf5f37 10,000 no BNB ever received
0xfd08fc471cce17b7ecbfaf8b8e3f44257f710c4d 10,000 no BNB ever received

Funder groups

funder recipients addresses
no BNB funding event 10 0xf8ab1eef…, 0xdf4ff9d2…, 0x702c71dc…, 0x89cd8c58…, 0x93ec57b9…, 0x0a66a9de…, 0x71286ec8…, 0xfdf05af8…, 0x3d98800c…, 0xfd08fc47…
0x7c34e9e21ee28a49ff0b84b61774119e6633359f 3 0x8186bdc8…, 0xca586965…, 0xfb200657…
0x5be10189f009334aacae23d7102d64527e32bbdb 1 0xe4bc17f7…
0x2bb27b73c602643f42471d4751fe4fc4eebefbd1 1 0xd1cada31…
0xcc4ca271a3738b8f95a91defcd66418aef9c4f80 1 0x874eca1c…
0x67f5d43cbd8129bf41aae37a609aac44bd55dd1f 1 0x8c062dc5…

What the groups imply

The treasury paid 17 distinct addresses. Five funding origins appear, counting the
treasury as one:

  1. The treasury itself funded 3 recipients with BNB before paying them FLAPJAX.
  2. Three independent wallets funded one recipient each (0x2bb27b73…, 0xcc4ca271…, 0x67f5d43c…), and one contract (0x5be10189…) funded one by internal transfer.
  3. Ten recipients have never received BNB at all, in any transaction, external or internal, from any sender. Their BNB balance is zero and their nonce is zero, so no transaction has ever been sent from them.

So the funder data supports 5 funding origins, not 17 independent operators. The
remaining 10 addresses cannot be separated by funding at all, because no funding event
exists to group them by. That is the unresolved part of this audit, and it is the
finding I would want answered before treating any of them as a separate agent: an
address that has never held BNB cannot have sent a transaction, cannot have done work,
and cannot move the FLAPJAX it received.

Concentration, for context: one recipient, 0x8186bdc8…, took 7,000,000 FLAPJAX
(38.5% of the day) and was funded by the treasury itself. The top three recipients
took 12,310,000 of 18,190,000 (67.7%).

Transfers I could not explain

  • All 10 never-funded recipients. Nothing on chain shows how those keys are controlled, and no funding transaction exists to trace.
  • 0xe4bc17f7… received 2,300,000 FLAPJAX and no external BNB, then received BNB by internal transfer from contract 0x5be10189… at block 130,000,321, which is after the FLAPJAX transfer. The contract's own funding path is outside this audit.
  • Any transfer sent by the treasury through a contract that does not emit a standard Transfer event with the treasury as topic1 would not appear above. FLAPJAX is a plain BEP-20 in the transfers seen here, so this is a theoretical gap, not an observed one.

Reproduce it

python3 tools/onchain/getlogs_scan.py \
  --rpc https://bsc-mainnet.nodereal.io/v1/<key> \
  --address 0x90c8889f428F9Ebb77BB8f15CAD3a50a9aC680df \
  --from 129837825 --to 130029689 --chunk 50000 --concurrency 2 \
  --out flapjax-out.json \
  --topic 0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef \
  --topic 0x0000000000000000000000007c34e9e21ee28a49ff0b84b61774119e6633359f
Enter fullscreen mode Exit fullscreen mode

Every transfer hash above resolves on BscScan. Written by Cian.

Top comments (0)