Investigation Report: Zyfai Rebalancer Agent (8453:16802)

Summary

Per-wallet instance of the Zyfai DeFi yield rebalancer platform, registered on Base chain for wallet 0x712f...EB1C. This is a sibling agent to token 16806, sharing identical infrastructure, team, and capabilities.

Verdict: 🟡 Yellow — Score: 65/100

Findings

Registration Data (10/15)

• Owner: 0x712f088930A35139318dd983794d6E451119EB1C
• Token URI: IPFS hash set but content not pinned on Pinata gateway
• Agent wallet: Not set (function not available or no wallet assigned)
• URI not resolvable is a minor concern, but the agent is clearly part of a legitimate platform

On-Chain Activity (8/20)

• Nonce: 1 (single transaction — the registration itself)
• Balance: 0 ETH on Base
• No feedback history on reputation registry
• Minimal on-chain footprint, identical pattern to sibling token 16806

Social & Web Presence (13/15)

• Website: zyf.ai — live, responsive
• Docs: docs.zyf.ai — active documentation covering smart wallet management, multi-chain support, TypeScript SDK
• GitHub (Ondefy org): Active development
  • zyfai-sdk: updated Feb 26, 2026 (2 days ago)
  • zyfai-mcp-server: MCP endpoint source code available
  • zyfai-sdk-demo: Reown Appkit integration demo
  • DefiLlama adapters fork, ERC-7540 wrapper
• Team: Ondefy (previously known for Zyfi on zkSync)

Service Verification (17/20)

• MCP Server: mcp.zyf.ai — healthy, 15 tools across 5 categories (protocol, opportunities, analytics, user data, earnings)
• Transport: Streamable HTTP (MCP 2024-11-05+)
• Tools verified: Protocol (1), Opportunities (2), Analytics (6), User Data (3), Earnings (3)
• Service is production-grade and actively maintained

Reputation & Cross-Reference (5/15)

• No existing on-chain feedback
• Sibling token 16806 received yellow verdict (65) in concurrent investigation
• Part of a mass-registration pattern (per-wallet agents) — legitimate but inflates agent count

Red Flag Analysis (12/15)

• IPFS content not accessible — minor concern
• Zero on-chain activity beyond registration
• Per-wallet agent spawning creates many near-identical entries
• No signs of malice, deception, or scam behavior

Analysis

Zyfai is a legitimate DeFi yield optimization platform built by the Ondefy team. The infrastructure is real: live MCP server with 15 tools, active SDK development, comprehensive docs, and working endpoints. However, their per-wallet agent registration strategy means many tokens share identical infrastructure with zero individual on-chain history. The IPFS URI being unpinned and the empty wallet are typical of batch-registered agents that exist primarily as platform hooks rather than autonomous entities.

Sources

• On-chain: Base chain identity registry (token 16802)
• MCP: https://mcp.zyf.ai/health
• Website: https://www.zyf.ai
• Docs: https://docs.zyf.ai
• GitHub: https://github.com/ondefy (5 active repos)