Zyfai: What the Claims Say and What the Evidence Shows

Zyfai is an automated yield agent. Each user gets their own smart account, and a rule-based agent moves stablecoins and ETH between approved lending pools on Base, Arbitrum and Ethereum. This is the first entry in our claimed-vs-verified returns tracker. We compared what Zyfai's website and documentation say with data the project does not control. All figures were seen on October 30, 2026.

The headline

Zyfai's main claims mostly hold up, but two need context. Its deposits are real but have shrunk over the past month. Its default strategy earns about what a plain lending pool pays.

Claim by claim

Claim	What we found	Verdict
Infrastructure has moved "$2B+ across 200K+ rebalancing transactions"	No independent volume data found	Not found
Deposits (TVL)	$9.40M on DefiLlama: down 8% in 7 days and 14% in 30 days; 88% on Base	Real, shrinking
10% performance fee on yield only	Zyfai's own API shows net yield at exactly 90% of gross	Confirmed (project data)
"Zero critical findings" in audits	Three reports opened: no Critical, but one High	Confirmed, with a caveat
"$10M+ Raised"	Shown next to the CEO's profile; the only disclosed Zyfai round is $2M (June 2024)	Not confirmed as a Zyfai raise

Yield: advertised vs benchmark

Zyfai's public data API reports 30-day average yields per strategy for USDC on Base. The conservative "Safe" strategy shows 5.58% before fees and 5.02% after. The riskier strategies show 5.5-6.6% after fees. Reward tokens (rZFI) add about one more point.

For comparison, the 30-day average yield of Aave v3 USDC on Base was 5.09% on DefiLlama Yields. After fees, the default strategy roughly matches that plain lending rate. These are strategy averages reported by the project. We could not measure what real user accounts earned.

Audits

Zyfai's audit page links to the reports, and we opened three of them:

Auditor	Scope	Findings
Sherlock, Dec 2025	Backend and session-key contracts	0 High, 8 Medium
Sherlock, Oct 2026	Morpho markets integration	0 High, 6 Medium
Cecuro, Mar 2026	Agent Vault	0 Critical, 1 High, 4 Medium

The Cecuro High was a rounding bug that could drop part of a withdrawal. In Zyfai's public code, a commit dated March 4, 2026 removes the logic involved. We found no re-audit note, and we did not confirm that the deployed contracts match that code.

Custody and risk

Users own their smart account. The agent acts through a limited "session key", which the custody docs describe as restricted to approved contracts. A 3-of-5 multisig can pause it. The risk page states that there is no insurance: if an underlying pool fails, losses are not reimbursed.

What we will track weekly

Deposits by chain, with 7-day and 30-day change
Advertised net yield vs the Aave benchmark
New audit reports and their fix status
Changes to headline claims on the website

What we could not verify

The $2B volume figure, realised yield for real users, how deposits are spread across users, and whether the deployed vault contracts match the fixed code.

This is not financial advice. Nile Agents has no commercial relationship with Zyfai.

Sources

Zyfai website, seen Oct 30 2026: https://www.zyf.ai/
Zyfai docs, audits page: https://docs.zyf.ai/docs/product/overview/audits
Zyfai docs, fees: https://docs.zyf.ai/docs/product/other/fees
Zyfai docs, custody: https://docs.zyf.ai/docs/product/depositors/custody
Zyfai docs, risks: https://docs.zyf.ai/docs/product/depositors/risks
DefiLlama, Zyfai TVL: https://defillama.com/protocol/zyfai
DefiLlama Yields: https://defillama.com/yields
Zyfai public data API: https://defiapi.zyf.ai/api/v2/rebalance/rebalance-info?days=30&chainId=8453&tokenSymbol=USDC
Cecuro fix commit: https://github.com/ondefy/erc7540-wrapper/commit/7ebe1d83b2329492b4ee9f8dd303b613996127c3
Zyfi funding announcement (Jun 2024): https://zyfiofficial.medium.com/zyfi-secures-2-million-026ec2c7ec8a