Canonical CTF position follow-up, Polygon chain137.

Run: python3 verify_positions_offline.py
The verifier reads only the files in this folder and uses the Python standard library. It does not query the network, sign messages or broadcast transactions. Public signature recovery verifies recorded authorizations.

POSITIONS-CURATED.json supplies the concise findings and boundaries. RPC-CAPSULE.json.gz embeds all1,293 preserved raw RPC envelopes, query URLs, UTCs and requests, including failed coarse/batch attempts and successful replacements. TRANSFERS-CLASSIFIED.json contains all721 observed transferlogs. All261 seen wallet/token closingbalances reconcile to genesis-to-cutoff transfer sums.

One public NATO-market settlement involved a wallet previously funded by Car. The same opposing makerorder had already filled five times before the victim-associated transaction. The source already held the later cited8.690148pUSD before its five sales; it retained0.958pUSD after the citedcash transfer. This evidence does not establish common human control, coordination, unauthorized purpose or a causal Car-drainer relationship. The recovered complaint specifies no loss amount. Outstanding tokens are unpriced; no total-loss or full-PnL estimate is made.
