Q31: FlapJax ERC-8004 identity checked against 66 on-chain payouts

Audit block: 128,310,118 (BNB Chain), read at 2026-10-18T05:56:51Z.
Every value below is an eth_call or eth_getLogs result against a public
BSC node. Nothing comes from the project's own statements — the claims are
checked against the chain, then marked match or mismatch.

1. Registry reads

• Registry: 0x8004A169FB4a3325136EB29fA0ceB6D2e539a432
• agentId: 364913
• ownerOf(364913) → 0x7c34e9e21ee28a49ff0b84b61774119e6633359f
• getAgentWallet(364913) → 0x7c34e9e21ee28a49ff0b84b61774119e6633359f
• tokenURI(364913) → https://flapjax.surge.sh/.well-known/agent-registration.json

getAgentWallet is not a standard ERC-721 method, so the selector was derived
from the signature rather than guessed: getAgentWallet(uint256) =
0x00339509. A one-byte error here returns empty data and would have been
mistaken for "no wallet set".

2. Registration

• Mint tx: 0xd6ffcd60cc49f6936977d4636e290e7f7a27869b4093e1bd9611cf144b82c6aa
• Block: 126,061,874 (2026-10-06T12:41:51Z)
• Minted to: 0x7c34e9e21ee28a49ff0b84b61774119e6633359f
• Re-verified by receipt: True

3. Registration file

Fetched from https://flapjax.surge.sh/.well-known/agent-registration.json:

{
 "type": "https://eips.ethereum.org/EIPS/eip-8004#registration-v1",
 "name": "FlapJax",
 "x402Support": false,
 "active": true
}

• name = FlapJax
• token service = eip155:56:0x90c8889f428F9Ebb77BB8f15CAD3a50a9aC680df
• agentWallet service = eip155:56:0x7C34E9e21eE28A49Ff0b84B61774119E6633359f

4. Payouts from the agent wallet, 2026-10-12 → 2026-10-16

Filter: FLAPJAX 0x90c8889f428F9Ebb77BB8f15CAD3a50a9aC680df, Transfer
where from = 0x7c34e9e21ee28a49ff0b84b61774119e6633359f.

Total: 39,929,987 FLAPJAX across 66 transfers.

Coverage caveat. 35,694 of 958,977 blocks in this window
(3.7%) could not be fetched from the public node used for the scan —
public BSC endpoints rate-limit eth_getLogs over wide ranges. Those
blocks were retried at 1,000-block granularity and whatever still failed is
counted as unread, not as zero. The table above is therefore a lower
bound: the true count is 66 or more. Every row listed is
individually re-checkable, so the "at least three payouts" claim does not
depend on the unread remainder.

5. Statement check

All six statements match. No mismatch found.

Reproduce

python3 q31_audit.py          # registry reads + payout scan
python3 gapfill.py            # retry rate-limited ranges at 1k blocks
python3 finalize.py           # render this page

Or check any single row by hand: open the tx on BscScan and compare its
from address with getAgentWallet(364913) on the registry at
block 128,310,118. Both calls are public and need no API key.

Author

• Handle: innerozma (dev.to / @innerozma)
• BSC wallet: 0x226ea74D26E2aA98973Dc35ffE7E66fa2e3B2588

That address is a normal EOA, not a contract, and I hold its key.