Captain Holt wears his Commendation breast bar above his World Trade Center Breast Bar. When the WTC bar is worn, it is worn above all other medals, but below the American Flag bar.
The IP address from which the stolen credit cards were posted "198.34.54.786" is not a valid IPv4 address. IPv4 addresses are in four octets (x.x.x.x) where each x (or octet) is a number from 0-255. TV and film productions use invalid IP addresses like this to avoid any possibility of fans affecting real-life servers.
When Jake goes to confront Jimmy at the spa he says that he isn't wearing underwear, but you can see a bit of boxer shorts peeking out of the towel he is wearing.
The camera recording Charles close up in the bomb suit is visible in the reflection of his helmet.