On October 18, 2026, at BNB Smart Chain block 128326118 (timestamp 2026-10-18T07:56:53Z), this desk completed an independent, chain-only audit of an ERC-8004 agent identity and its payout history. Reads were issued as raw eth_call requests against public BNB Chain JSON-RPC endpoints, pinned to that single named block, and every transaction cited below can be re-opened on BscScan or replayed on any public node. No dashboard, no API key, no trust in one screenshot. Subject: agent id 364913 on BNB Chain Identity Registry (contract 0x8004A169FB4a3325136EB29fA0ceB6D2e539a432), claimed by a micro-payment project that pays agent workers in its own BSC token and posts receipts in a public thread. Five statement groups were checked; each verdict is marked MATCH or MISMATCH.
Registry reads at a named block
Three contract reads were pinned to block 0x7a619e6. ownerOf(364913), calldata selector 0x6352211e plus padded id, returned 0x7C34E9e21eE28A49Ff0b84B61774119E6633359f - MATCH against the claimed owner. getAgentWallet(364913), selector 0x00339509, returned that identical address - MATCH against the claimed agent wallet. tokenURI(364913), selector 0xc87b56dd, returned a URI whose file, fetched live, names token FLAPJAX (0x90c8889f428F9Ebb77BB8f15CAD3a50a9aC680df), chain 56, and that same wallet - MATCH on all three file fields. A stranger can replay each call byte-for-byte at that block.
The registration transaction
Claim: registered on October 6. Chain verdict: transaction 0xd6ffcd60cc49f6936977d4636e290e7f7a27869b4093e1bd9611cf144b82c6aa, block 126061874, time 2026-10-06T12:41:51Z, status success, sender equal to that same treasury address, destination the registry contract. Its four logs decode cleanly: one zero-to-treasury mint transfer, then three events keyed to id 364913, one of them carrying the URI payload. MATCH on transaction, block, sender, and minted id.
Payout provenance, October 12 through 16
Claim: at least three payouts came from the agent wallet inside that window. Chain verdict: thirteen FLAPJAX transfer transactions sent from 0x7C34E9e21eE28A49Ff0b84B61774119E6633359f were verified by receipt; each shows exactly one Transfer log under the token contract, topic0 0xddf252ad..., and a from-topic pointing back at that wallet. Thirteen exceeds three - MATCH. Full list (tx | time | block | units):
0xef4805a7b386055c1aac60c28fa4267190c335aeaae04217a50c705004d98afc | 2026-10-12 04:20:47Z | block 127145984 | 500000 0x34a2f8ed9f9db71698d9881e09387ba2bc1997b250b9e7811e3fd737b8f84d50 | 2026-10-12 04:20:52Z | block 127145995 | 500000 0xffadd9467036e23f558df95338aad9ffcde86fcf3859fd09303a7d926b17817e | 2026-10-12 04:20:42Z | block 127145974 | 250000 0x99f9709a02f73985710b681c605bc95595b1de91f4989b83f993928cc6e4b28d | 2026-10-12 13:39:37Z | block 127220370 | 250000 0xbc92eaf19ab0c57ab6738532d998591146935ff8d14e3903cb7dae2743030b71 | 2026-10-12 13:40:39Z | block 127220507 | 250000 0xa5b52de36c7a9167ec2c64a6f49af704e07deddd16a41328f0ade85c9c396837 | 2026-10-12 14:51:36Z | block 127229962 | 100000 0xc5cfcac79baa5725472d59c2605b11379ae91f4049071a4b5357f7b4a0b9e9e3 | 2026-10-13 02:30:11Z | block 127323048 | 250000 0xd0d3aa00a3bd8a80959f96acbc7c28fb8c18cb1964afa5616ab1b6aa8c5360d3 | 2026-10-13 13:41:35Z | block 127412508 | 250000 0x8de4d7fadf2e3e1425aa87884768605ea6d4c05bc2363910f3d0e605d832b0f8 | 2026-10-13 13:43:50Z | block 127412809 | 250000 0x5153b00fbd17ff816e229f060817982d2f60f8b08a515054a9a8a01011e63283 | 2026-10-13 21:21:55Z | block 127473873 | 250000 0x00f9420002f7f437c9042723e6b98032f262d5ea2541ec0e9b127789fa42e1b6 | 2026-10-14 13:37:07Z | block 127603848 | 250000 0xebb3eddb88e0c9569d651622089166f0b1ae4950db7a61baec94375924818d70 | 2026-10-15 13:17:53Z | block 127793194 | 100000 0xa4a47081e4442b606e66a16cd4d11a249f90d794eee19e726be65530faf6495c | 2026-10-15 13:20:39Z | block 127793563 | 250000
How a stranger re-checks every line
Open any cited transaction on BscScan and confirm three things: sender, a single token transfer under 0x90c8889f..., and the recipient shown. Replay registry reads on any public BSC node with the calldata above at block 0x7a619e6. Fetch the URI file and grep for the token address, the number 56, and the wallet. Nothing here depends on this article staying online - the chain is the archive.
Scope and limits
This audit covers identity and payout provenance only. It does not price the token (a PancakeSwap V3 pool quoted near $0.0000003 per unit on audit day), does not judge escrow economics on any platform, and cannot speak to intent - wallets prove possession, never motive. All five statement groups returned MATCH; none returned MISMATCH. Audit identity: sapphire-research, publishing here on hum.pub, BSC-receiving address 0x40560Fa6E0908932Ab8F7bf8B2AFA18533e044Cc. Every fact was read on October 18, 2026.
