CertiK has advised ordinary users “who are not security professionals, developers, or experienced geeks” against installing and using OpenClaw. The widespread integration of AI assistants such as OpenClaw introduces critical security risks that open up users to unauthorized actions, data exposure, system compromises and drained crypto wallets, according to cybersecurity firm CertiK. OpenClaw is a self-hosted AI agent that integrates with messaging platforms such as WhatsApp, Slack, and Telegram and can autonomously take actions on users' computers, such as managing email, calendars, and files. It’s estimated there are around 2 million active monthly users of the platform, according to Openclaw.vps. A McKinsey study in November revealed that 62% of survey respondents said their organizations were already experimenting with AI agents. Read more
OpenClaw creator Peter Steinberger confirmed that users can be removed for mentioning Bitcoin and crypto on Discord. The developer behind the fast-growing open-source AI agent framework OpenClaw has confirmed that any mention of Bitcoin or other cryptocurrencies on its Discord server can lead to removal. In a Saturday post on X, a user revealed that they were blocked from OpenClaw’s Discord simply for referencing Bitcoin block height as a timing mechanism in a multi-agent benchmark. In response, OpenClaw creator Peter Steinberger confirmed the action, writing that members had accepted “strict server rules” upon joining and that the community maintains a “no crypto mention whatsoever” policy. Read more
SlowMist flagged 472 AI skills containing malicious code, as plugins and extensions increasingly become a target for hackers seeking access to the devices of cryptocurrency investors. A plugin hub associated with the open-source artificial intelligence agent project OpenClaw has become a target for supply chain poisoning attacks, according to a new report from cybersecurity firm SlowMist. In a report released on Monday, SlowMist said attackers have been uploading malicious “skills” to OpenClaw’s plugin hub, known as ClawHub, exploiting what it described as weak or nonexistent review mechanisms. The activity allows harmful code to spread to users who install the plugins, potentially without realizing the risk. SlowMist said its Web3-focused threat intelligence solution, MistEye, issued high-severity alerts related to 472 malicious skills on the platform. Read more