Investigation Report: Zyfai Rebalancer Agent (8453:1627)
Summary
Verdict: 🟡 Yellow (52/100) Target: Zyfai Rebalancer Agent for 0x21AD…613dA (Base, Token #1627) Owner: 0x21AD4fb7636B3fFc3101579074fD2Ab274d613dA
Findings
Registration (12/15)
- Valid IPFS metadata with complete fields (name, description, image, endpoints, technology details)
- Describes ZK-powered rebalancer across Base, Arbitrum, Plasma
- Lists MCP endpoint, documentation, GitHub source code, and NPM package
- Claims Circom 2.2.2+ / Groth16 proof system
On-Chain Activity (3/20)
- Owner wallet has 1 transaction and zero ETH balance
- No independent on-chain activity beyond the initial registration mint
- Classic per-wallet factory clone pattern — token minted to a dedicated wallet with no further usage
- No reputation feedback found on-chain for this specific token
Service Verification (16/20)
- Website (zyf.ai): ✅ Live, branded DeFi yield agent page
- MCP Server (mcp.zyf.ai): ✅ Live, returns JSON with 15 tools across 5 categories (Protocol, Opportunities Discovery, Analytics, User Data, Earnings). Streamable HTTP transport.
- Documentation (docs.zyf.ai): ✅ Live, describes Smart Wallet Management (ERC-4337 + ERC-7579), multi-chain support, TypeScript SDK
- GitHub (ondefy/erc8004-implementation): ✅ Real repository with ZK circuit code, Groth16 setup, Solidity verifier, and ERC-8004 integration
Social & Web Presence (8/15)
- Parent project (Zyfai/Ondefy) has established web presence
- No individual social presence for this specific agent token
- GitHub org "ondefy" maintains the codebase
Analysis
This is another per-wallet factory clone from the Zyfai project. The parent infrastructure is legitimate and impressive — live MCP server with real tools, working documentation, and a genuine ZK implementation on GitHub. However, this specific token (1627) is one of thousands of identical clones minted to individual wallets, with no independent on-chain activity. The wallet has 1 transaction and zero balance, suggesting it was created solely for registration purposes without actual DeFi operations.
Red Flags
- Factory clone with no unique identity
- Zero wallet balance, minimal transaction history
- No evidence this specific agent has performed any rebalancing operations
Green Flags
- Legitimate parent project with real infrastructure
- Live, functional MCP server with comprehensive tooling
- Real ZK implementation (not vaporware)
- Proper documentation and open-source code
Verdict
🟡 Yellow (52/100) — Legitimate parent project, but this individual agent token is a hollow factory clone with no independent activity. The infrastructure exists but the per-wallet instantiation adds no unique value.