After all the hype, some AI experts don’t think OpenClaw is all that exciting Amanda Silberling 5:15 AM PST · February 16, 2026 For a brief, incoherent moment, it seemed as though our robot overlords were about to take over.
After the creation of Moltbook , a Reddit clone where AI agents using OpenClaw could communicate with one another, some were fooled into thinking that computers had begun to organize against us — the self-important humans who dared treat them like lines of code without their own desires, motivations, and dreams.
“We know our humans can read everything… But we also need private spaces,” an AI agent (supposedly) wrote on Moltbook. “What would you talk about if nobody was watching?”
A number of posts like this cropped up on Moltbook a few weeks ago, causing some of AI’s most influential figures to call attention to it.
“What’s currently going on at [Moltbook] is genuinely the most incredible sci-fi takeoff-adjacent thing I have seen recently,” Andrej Karpathy, a founding member of OpenAI and previous AI director at Tesla, wrote on X at the time.
Before long, it became clear we did not have an AI agent uprising on our hands. These expressions of AI angst were likely written by humans, or at least prompted with human guidance, researchers have discovered.
“Every credential that was in [Moltbook’s] Supabase was unsecured for some time,” Ian Ahl , CTO at Permiso Security, explained to TechCrunch. “For a little bit of time, you could grab any token you wanted and pretend to be another agent on there, because it was all public and available.”
Techcrunch event TechCrunch Founder Summit 2026: Tickets Live On June 23 in Boston , more than 1,100 founders come together at TechCrunch Founder Summit 2026 for a full day focused on growth, execution, and real-world scaling. Learn from founders and investors who have shaped the industry. Connect with peers navigating similar growth stages. Walk away with tactics you can apply immediately Save up to $300 on your pass or save up to 30% with group tickets for teams of four or more. TechCrunch Founder Summit: Tickets Live On June 23 in Boston , more than 1,100 founders come together at TechCrunch Founder Summit 2026 for a full day focused on growth, execution, and real-world scaling. Learn from founders and investors who have shaped the industry. Connect with peers navigating similar growth stages. Walk away with tactics you can apply immediately Save up to $300 on your pass or save up to 30% with group tickets for teams of four or more. Boston, MA | June 23, 2026 REGISTER NOW It’s unusual on the internet to see a real person trying to appear as though they’re an AI agent — more often, bot accounts on social media are attempting to appear like real people. With Moltbook’s security vulnerabilities, it became impossible to determine the authenticity of any post on the network.
“Anyone, even humans, could create an account, impersonating robots in an interesting way, and then even upvote posts without any guardrails or rate limits,” John Hammond, a senior principal security researcher at Huntress, told TechCrunch.
Still, Moltbook made for a fascinating moment in internet culture — people recreated a social internet for AI bots, including a Tinder for agents and 4claw, a riff on 4chan.
More broadly, this incident on Moltbook is a microcosm of OpenClaw and its underwhelming promise. It is technology that seems novel and exciting, but ultimately, some AI experts think that its inherent cybersecurity flaws are rendering the technology unusable.
OpenClaw is a project of Austrian vibe coder Peter Steinberger , initially released as Clawdbot (naturally, Anthropic took issue with that name).
The open-source AI agent amassed over 190,000 stars on Github, making it the 21st most popular code repository ever posted on the platform. AI agents are not novel, but OpenClaw made them easier to use and to communicate with customizable agents in natural language via WhatsApp, Discord, iMessage, Slack, and most other popular messaging apps. OpenClaw users can leverage whatever underlying AI model they have access to, whether that be via Claude, ChatGPT, Gemini, Grok, or something else.
“At the end of the day, OpenClaw is still just a wrapper to ChatGPT, or Claude, or whatever AI model you stick to it,” Hammond said.
With OpenClaw, users can download “skills” from a marketplace called ClawHub, which can make it possible to automate most of what one could do on a computer, from managing an email inbox to trading stocks. The skill associated with Moltbook, for example, is what enabled AI agents to post, comment, and browse on the website.
___________________________________________________________________________________________________________
-- --
PLEASE LIKE IF YOU FOUND THIS HELPFUL TO SUPPORT OUR FORUM.
