The 40mA current draw is inconsistent with the over-current condition reported in the error log. Perhaps they are unrelated?
Normal practice is to bypass every supply with at least one filter capacitor. Since you have accounted for all the capacitors, it is unlikely that you will find an additional 1.8V supply. Perhaps the 1.2V reading (controller Vcore ?) is normal.
I would map out the ground and supply pins of the TSOP package. You would do this by testing for continuity between each pad and the 3.3V and 1.2V capacitors. Modern NAND flash typically has separate Vcc and VccQ rails. These can be at the same voltage (eg 3.3/3.3 or 1.8/1.

or at different voltages (eg Vcc = 3.3V, VccQ = 1.8V). Perhaps there are some NANDs that use 1.2V for VccQ ???
Just out of curiosity, I would also test for continuity between the supplies and each of the unpopulated resistors (R5, R4, R15, R12) near C8. These resistors could actually be configuration links.