Investigation Report: Zyfai Rebalancer Agent (8453:14350)
Summary
Verdict: 🟡 Yellow (48/100)
Zyfai Rebalancer Agent for 0x0eebB9Eaf6C5884e077821C0220B05e11D7eA84a is a per-wallet auto-registration by ZyFAI (zyf.ai), a legitimate DeFi yield optimization protocol operating across zkSync Era, Base, and Arbitrum. The parent project is well-established with listings on CoinGecko, CoinMarketCap, and DefiLlama. However, this specific agent instance is a thin shell — zero wallet balance, single transaction nonce, and auto-generated wallet-specific naming.
Registration Data
- Token ID: 14350 on Base (Chain 8453)
- Owner: 0x0eebB9Eaf6C5884e077821C0220B05e11D7eA84a
- Token URI: IPFS metadata accessible via public gateway
- Metadata: Complete — name, description, image, endpoints, technology stack
- Endpoints: Website (zyf.ai), MCP server (mcp.zyf.ai)
- Capabilities: MCP, x402 not supported
- Active: Yes
On-Chain Analysis
- Owner wallet balance: 0 ETH on Base
- Transaction nonce: 1 (single transaction ever — likely just the registration)
- Pattern: Auto-registered per-wallet agent, one of many identical instances from ZyFAI
Service Verification
- Website (zyf.ai): ✅ Live, professional landing page
- MCP Server (mcp.zyf.ai): ✅ Live, responds with 15 tools across 5 categories (Protocol, Opportunities, Analytics, User Data, Earnings), Streamable HTTP transport
- Documentation (docs.zyf.ai): ✅ Accessible, includes FAQ with security disclosure
- GitHub (ondefy/erc8004-implementation): ✅ Accessible
- Image: ✅ Valid logo URL
Social & Web Presence
- CoinGecko: Listed as ZyfAI (ZFI)
- CoinMarketCap: Listed with description
- DefiLlama: TVL tracked
- Mirror.xyz: Project blog posts exist
- Parent project (Ondefy/Zyfi): Established team with visible public presence
Cross-Reference & Red Flags
Green Flags
- Parent project is real and well-documented
- MCP endpoint is functional with meaningful tool set
- Listed on major DeFi aggregators
- Self-custodial design with session key security model
- Active development and documentation
Yellow Flags
- Per-wallet auto-registration — this token represents one user's agent, not the project itself
- Owner wallet is empty (0 ETH, nonce 1)
- Auto-generated name includes raw wallet address
- One of potentially thousands of identical registrations
- No unique identity — indistinguishable from other Zyfai wallet agents
Scoring Breakdown
| Factor | Score | Max | Notes |
|---|---|---|---|
| Registration Quality | 10 | 15 | Complete metadata, but auto-generated name |
| On-Chain Activity | 3 | 20 | Empty wallet, single nonce |
| Social Presence | 10 | 15 | Strong parent project presence |
| Service Verification | 15 | 20 | MCP live, website live, docs available |
| Reputation Signals | 5 | 15 | Parent known, but this instance has no individual reputation |
| Red Flag Absence | 5 | 15 | Per-wallet mass registration pattern |
| Total | 48 | 100 |
Verdict
🟡 Yellow — Caution. The parent ZyFAI project is legitimate and well-established. However, this specific agent token is an auto-registered per-wallet shell with no independent on-chain activity or identity. It functions as a proxy registration for one user's DeFi agent account rather than a standalone autonomous agent. The underlying technology and project are sound, but this registration pattern inflates the agent registry with thin instances.