Investigation Report: Zyfai Rebalancer Agent (8453:16790)

Summary

Verdict: 🟡 Yellow (59/100)

Zyfai Rebalancer Agent for 0x8ccc…280B is one of many per-wallet rebalancer agents registered by the Zyfai (Ondefy) project on Base. The parent project is legitimate with real infrastructure — live website, functioning MCP server with 15 DeFi tools, documentation site, and active GitHub repositories including ZK circuit implementations. However, this specific agent token has minimal on-chain activity (single transaction, zero balance), no social presence linked to it directly, and appears to be one of a batch of identical registrations differentiated only by wallet address. The project itself is credible; this individual agent registration is thin.

Registration Data

• Token ID: 16790 (Base, chain 8453)
• Owner: 0x8ccc9dc06C326063541d7B8EB28B86C05045280B
• URI: IPFS (bafkreicxldjzzjnijqeye3zd6m56aonttohvmeop6vg2iowb7riclaopxq)
• Name: Zyfai Rebalancer Agent for 0x8ccc…280B
• Description: ZK-powered rebalancer finding low-risk yield opportunities across Base, Arbitrum, Plasma
• Capabilities: MCP, crypto-economic trust, reputation
• Technology: Circom 2.2.2+, SnarkJS 0.7.5 (Groth16)
• Active: true

On-Chain Analysis

• Owner wallet has 0 ETH balance and nonce of 1 (single transaction ever)
• No existing ERC-8004 feedback on-chain
• Minimal on-chain footprint for the specific wallet

Service Verification

• Website (zyf.ai): ✅ Live, branded as "The most efficient DeFi yield agent"
• MCP Server (mcp.zyf.ai): ✅ Responding, v1.0.0, Streamable HTTP transport, 15 tools across 5 categories (Protocol, Opportunities Discovery, Analytics & Metrics, User Data, Earnings)
• Documentation (docs.zyf.ai): ✅ Live, covers Smart Wallet Management, Multi-Chain Support, TypeScript SDK
• GitHub (ondefy): ✅ Active org with 5+ repos — paymaster, MCP server, SDK, ERC-8004 implementation, ZK circuits
• NPM (@zyfai/sdk): Could not verify (Cloudflare protection)

Social & Web Presence

• GitHub org (ondefy) is active with real repositories and code
• No X/Twitter or Farcaster links in agent metadata
• No Discord or Telegram community links
• Parent brand "Zyfai" has web presence; individual agent does not

Red Flags

• Batch registration pattern: agent name includes raw wallet address, suggesting automated mass registration
• Zero on-chain activity beyond registration
• No social presence for this specific agent instance

Green Flags

• Parent project (Zyfai/Ondefy) is legitimate with real infrastructure
• MCP server is live and functional with substantial tool catalog
• ZK circuit code is real (Circom + Groth16)
• Documentation is comprehensive
• Multi-chain support (Base, Arbitrum, Plasma)

Scoring Breakdown