PANews, February 20: Yu Xian, founder of SlowMist, posted on X that 1,184 malicious skills have been identified on OpenClaw’s ClawHub marketplace. These skills steal SSH keys, crypto wallets, browser passwords, and open reverse shells. A single attacker uploaded 677 packages. The top-ranked skill contains nine vulnerabilities and has been downloaded thousands of times. Yu warned users that text is no longer just text—it is now executable instruction. He recommends using AI tools in isolated environments, as many OpenClaw skills carry potential risks. Furthermore, in Web3 security, smart contracts are only one part; the real causes of incidents are no longer limited to contracts. Just days ago, Moonwell was hacked for $1.78 million, with the vulnerable code originating from Co-Authored-By: Claude Opus 4.6.
SlowMist's Yuxian: 1,184 malicious tools found on ClawHub Market, capable of stealing SSH keys and crypto wallets
PANewsShare
Summary
SlowMist founder Yuxian revealed that 1,184 malicious skills on ClawHub may steal SSH keys and crypto wallets. One attacker uploaded 677 packages, with the top skill listing nine vulnerabilities and thousands of downloads. Yuxian warned that text can execute commands, urging the use of AI in isolated environments. He noted that smart contracts alone do not cover Web3 security risks, citing the $1.78 million Moonwell theft. Traders should closely monitor support and resistance levels amid shifting market trends.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.