ZyFAI Review 2026: Self-Custodial DeFi Yield Agent

ZyFAI is a DeFi yield agent that automates allocation, monitoring and rebalancing across lending pools. DefiLlama files it under AI Agents and lists it on Base, Arbitrum, Ethereum, Sonic and Plasma, with about $9 million in TVL and a listing date of April 2025.

The pitch is that users keep ownership of a personal smart account while a rule-based agent places capital in vetted pools. The homepage lists stablecoins, WETH, cbBTC, WBTC and a range of tokenized stocks as supported assets.

The project has its own token (ZFI) and refers to rZFI rewards on top of native pool yield. Treat the homepage numbers as self-reported, since the project does not include independent performance data.

ZyFAI deploys a Safe smart account for each user when they deposit. The user's own wallet stays the owner. A rule-based agent receives limited session-key permissions that are tied to specific calldata templates, so it can only call approved functions on approved pools.

The team maintains a whitelist of roughly 60 lending venues, screened on factors such as APY stability, TVL drawdown, liquidity and depeg risk. Users then choose which of those pools the agent can use and set their own caps. The agent moves funds when a better risk-adjusted yield appears.

A monitoring layer watches pool contracts and is meant to disable a pool and exit positions if an attack is detected. The homepage also says each action is anchored with a ZK proof receipt, so activity can be checked onchain.

The project does not publish a fee schedule. The homepage says gas is sponsored for users on supported chains, but it does not say whether ZyFAI takes a performance or management fee.

Users should check the app and official documentation before depositing to see any fees and how yield is split. Underlying protocols such as lending markets may also charge their own costs through spreads or rates.

ZyFAI is non-custodial according to the homepage: funds sit in a Safe smart account owned by the user, and the agent only holds limited session-key permissions. The homepage says a security proxy validates every outbound call, so a compromised agent could not move funds outside the signed scope. This is a design claim that readers should check against the audit reports.

The homepage cites end-to-end audits by Sherlock and Cecuro with no outstanding critical or high issues, and modular audits by firms including Ackee. DefiLlama lists two audits. It also describes a delisting of a pool during the November 2025 Stream Finance collapse with no user losses, though this is self-reported. Risks remain: bugs in smart accounts or session-key modules, failures in the underlying lending protocols, depegs, and reliance on the team's whitelist.

ZyFAI is for DeFi users who hold stablecoins, ETH, BTC or tokenized stocks and want yield rotation done for them with limits they set. It also targets builders using the SDK and institutions with MPC custody setups. It is less suited to anyone who wants guaranteed returns or no smart-contract exposure.