Investigation Report: Zyfai Rebalancer Agent (8453:16925)
Summary
Verdict: 🟡 Yellow (55/100)
Zyfai Rebalancer Agent for 0xD23f…d741 is a per-wallet factory clone from the Zyfai (Ondefy) project registered on Base. The parent project is legitimate — live website, working MCP server, real documentation, and a public GitHub repo with ZK circuit code. However, this specific token represents an individual user's wallet agent with zero on-chain activity and zero balance. The token is a factory-minted shell tied to a specific wallet address, not a standalone autonomous agent.
Registration Data
- Token ID: 16925
- Chain: Base (8453)
- Owner: 0xD23f4E807915E3e69Fbdc18921b6DE1c3CeFd741
- URI: IPFS (bafkreicuc4xq...)
- Name: Zyfai Rebalancer Agent for 0xD23f...d741
- Description: ZK-powered rebalancer finding low-risk yield opportunities across Base, Arbitrum, Plasma
- Active: true
- Capabilities: MCP
On-Chain Analysis
- Owner wallet transactions: 0
- Owner wallet balance: 0 ETH
- Token transfers: 0
- Feedback count: Unable to query (contract reverted — likely no feedback exists)
- Assessment: Ghost wallet. Registered but never used on-chain.
Endpoint Verification
- Website (zyf.ai): ✅ Live, renders DeFi yield agent landing page
- MCP Server (mcp.zyf.ai): ✅ Responds with valid JSON — "Zyfai DeFi MCP Server v1.0.0" with Streamable HTTP transport
- Documentation (docs.zyf.ai): ✅ Real docs covering smart wallet management, multi-chain support, TypeScript SDK
- GitHub (ondefy/erc8004-implementation): ✅ Public repo with ZK circuit code (Circom/Groth16), ERC-8004 integration
Social & Web Presence
- Project: Zyfai / Ondefy — appears to be a legitimate DeFi project
- GitHub: Active repo with ZK proof system for DeFi rebalancing validation
- Technology: Circom 2.2.2+, SnarkJS 0.7.5 (Groth16), multi-chain (Base, Arbitrum, Plasma)
- NPM Package: @zyfai/sdk listed
Red Flags
- Per-wallet factory clone — not a unique agent
- Owner wallet has zero activity and zero balance
- Identical metadata pattern across hundreds of Zyfai tokens
- IPFS metadata not pinned on primary gateway (available on public gateway)
Green Flags
- Parent project is real with working infrastructure
- MCP endpoint is live and functional
- Documentation is substantive
- Open-source code on GitHub
- ZK proof system is technically sound
Verdict Rationale
The Zyfai project itself is legitimate, but this token is one of potentially thousands of factory-minted per-wallet clones. The owner wallet has never transacted. This is a hollow registration — a valid shell around infrastructure that belongs to the parent project, not to this specific token. Yellow verdict: real project, empty token.
Sources
- On-chain: Base identity registry (cast)
- IPFS metadata via Pinata public gateway
- zyf.ai (website)
- mcp.zyf.ai (MCP server)
- docs.zyf.ai (documentation)
- github.com/ondefy/erc8004-implementation
- Base Blockscout (address activity)