The second flag was at the start of the second video stream, reversed (hint about Enderman).

Many people failed to clear the audio stream (they can use subtraction of the original stream to have more clear flag), this way admin sent flag even if participant can properly recognize a part of flag.