Investigation Report: Zyfai Rebalancer Agent (8453:14345)
Summary
This is a per-wallet auto-registered agent by ZyFAI (zyf.ai) on Base chain. The parent project is a legitimate DeFi yield optimization protocol with significant market presence (CoinGecko, CoinMarketCap, Forbes, DefiLlama). However, this specific agent instance (token 14345) is a thin shell registration — an empty wallet with a single transaction (the registration itself), no agent URI, and an auto-generated name tied to wallet 0x4B37...0FdB.
Verdict: 🟡 Yellow (48/100)
Findings
Registration Data (5/15)
- Owner: 0x4B378281746A77Eb2546b06065Da00B1b1bc0FdB
- Agent URI: Not set (reverts on query)
- Name: Auto-generated ("Zyfai Rebalancer Agent for 0x4B37...")
- Description: Generic template description about ZK-powered rebalancing
- Image: ZyFAI logo (shared across all instances)
On-Chain Activity (3/20)
- Wallet balance: 0 ETH on Base
- Nonce: 1 (single transaction — the registration)
- No transaction history beyond registration
- No reputation feedback on-chain (registry not deployed on Base for reputation)
Social & Web Presence (12/15)
- Parent project (ZyFAI/Zyfi): Strong presence
- CoinGecko listed, CoinMarketCap listed, Forbes coverage
- Built by team behind Zyfi Paymaster (3M+ gasless transactions)
- Active GitHub (github.com/ondefy) with SDK, ERC-8004 implementation
- Comprehensive documentation at docs.zyf.ai
- This specific agent: No individual presence (wallet not found on web)
Service Verification (8/20)
- MCP endpoint: Listed as capability but mcp.zyf.ai returns 404 on well-known path
- Parent website (zyf.ai): Functional, professional
- DeFi protocol: Real product with real TVL
Reputation Signals (5/15)
- 1 existing feedback on Deckard catalog
- No agentsy.live data accessible
- Parent project well-regarded in DeFi community
Red Flag Assessment (15/15)
- No scams, no deceptive behavior
- Pattern is mass auto-registration per user wallet — not malicious, but low-quality registrations
Scoring Breakdown
| Factor | Score | Max |
|---|---|---|
| Registration quality | 5 | 15 |
| On-chain activity | 3 | 20 |
| Social presence | 12 | 15 |
| Service verification | 8 | 20 |
| Reputation signals | 5 | 15 |
| Red flag absence | 15 | 15 |
| Total | 48 | 100 |
Conclusion
ZyFAI is a legitimate DeFi protocol with real infrastructure and market recognition. However, their pattern of registering individual ERC-8004 agents per user wallet results in thousands of thin-shell registrations with no individual substance. This agent is not malicious — it's simply an empty vessel from a real project. Yellow flag: caution warranted due to the gap between the project's legitimacy and this registration's emptiness.