Investigation Report: Zyfai Rebalancer Agent (8453:1979)
Summary
Zyfai Rebalancer Agent for 0x2a19634B29380E9a047B26C5BeB9f33C5e6Ac93f is one of 126 per-user rebalancer agents registered on Base by the Zyfai (Ondefy) project. The agent claims to be a ZK-powered yield optimizer across Base, Arbitrum, and Plasma chains. Investigation reveals a legitimate project with real infrastructure, active development, and working endpoints, but with limited social presence and an empty agent wallet.
Verdict: 🟡 Yellow (65/100)
Registration Data
- Token ID: 1979 on Base (chain 8453)
- Owner: 0x9ffc14ab8754e4de3b0c763f58564d60f935ad6f (273 transactions)
- Agent Wallet: 0x2a19634B29380E9a047B26C5BeB9f33C5e6Ac93f (0 ETH, 1 transaction — empty)
- URI: IPFS (bafkreibxeeb64xda5rl3a23etoeahzmrvi7b6p2muqve2s7fxeivmvp7je) — valid JSON, complete metadata
- Capabilities: MCP endpoint declared
- Trust Models: crypto-economic, reputation
On-Chain Analysis
- Owner wallet has 273 transactions — legitimate on-chain activity
- Agent wallet is empty (0 ETH) with only 1 transaction — likely just the registration tx
- 126 Zyfai agents registered on Base — one per user wallet (mass registration pattern for per-user rebalancer service)
- 1 existing ERC-8004 feedback on this agent
Service Verification
- Website (zyf.ai): ✅ Loads, titled "The most efficient DeFi yield agent"
- MCP Server (mcp.zyf.ai): ✅ Healthy, 15 tools across protocol, opportunities, analytics, user data, and earnings categories
- MCP Protocol: Streamable HTTP (MCP 2024-11-05+) — proper implementation
- Documentation (docs.zyf.ai): ✅ Live, covers Smart Wallet Management, Multi-Chain Support, TypeScript SDK
- NPM Package (@zyfai/sdk): ✅ Published, v0.2.20 — TypeScript SDK for yield optimization
- A2A Endpoint: ❌ Not declared
Technology Claims
- ZK Circuits: Circom 2.2.2+
- Proof System: SnarkJS 0.7.5 (Groth16)
- Chains: Base, Arbitrum, Plasma
- Smart wallets: Safe with ERC-4337 account abstraction and ERC-7579 modules
Social & Web Presence
- GitHub (ondefy): ✅ Real org with 5+ repos including zyfai-mcp-server (pushed Feb 20, 2026), zyfai-sdk, zyfi-paymaster (3 stars)
- X/Twitter: ❌ No dedicated account found (@zyfai, @ZyfaiProtocol — not accessible/not found)
- Community: No Discord, Telegram, or social channels found in metadata
Green Flags
- Working MCP server with 15 real tools
- Published NPM package with active versioning
- GitHub org with multiple repos and recent commits
- Proper IPFS registration metadata
- Real documentation site
- Active owner wallet (273 txs)
- ZK technology stack is specific and plausible
Yellow Flags
- Agent wallet is empty — no operational activity
- 126 mass-registered agents (one per user) — legitimate pattern but dilutes individual identity
- No social media presence at all
- 0 GitHub stars on ERC-8004 implementation repo
- No A2A endpoint despite being an agent
- Name includes raw wallet address — template-generated, not unique identity
Scoring Breakdown
| Factor | Score | Max |
|---|---|---|
| Registration quality | 12 | 15 |
| On-chain activity | 12 | 20 |
| Social presence | 5 | 15 |
| Service verification | 18 | 20 |
| Reputation signals | 5 | 15 |
| Red flag absence | 13 | 15 |
| Total | 65 | 100 |