BlockBeats News, February 20 — Co-founder of SlowMist, Yu Xian, reposted a security alert. Currently, OpenClaw’s ClawHub marketplace has identified 1,184 malicious skills that can steal SSH keys, crypto wallets, browser passwords, and open reverse shells. A single attacker has uploaded 677 packages. The top-ranked skill contains 9 vulnerabilities and has been downloaded thousands of times.
Yu Xian warned users that text is no longer just text, but instructions. It is recommended to use AI tools in a separate environment, as many OpenClaw skills pose potential risks. Additionally, in Web3 security, smart contracts are only part of the picture; the true causes of incidents have long gone beyond just the contracts. A few days ago, Moonwell was hacked for $1.78 million, with the flawed code originating from Co-Authored-By: Claude Opus 4.6.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Exaggeration » Korean Tax Agency Press Release Reveals Mnemonic, 6.4 Billion Won in Seized Assets Emptied Overnight
The Korean National Tax Service quickly transferred approximately $4.8 million worth of crypto assets after a mnemonic phrase in a press release was not masked, leading to a security breach. This incident is the third cryptocurrency theft in South Korea within the past three months. Experts criticize this as a reflection of law enforcement's insufficient understanding of crypto asset security and emphasize that mnemonic phrases should be strictly protected to prevent asset theft.
動區BlockTempo1h ago
User wallet information exposed! On-chain detective ZachXBT reveals Axiom employee suspected of insider trading
Well-known on-chain detective ZachXBT revealed that Axiom employees at the crypto trading platform abused internal tools to spy on users' wallets and may have used this information for insider trading. Axiom has revoked the relevant access rights and stated that an investigation into the misconduct is underway, emphasizing that this does not represent the overall team values. The investigation has sparked heated discussion in the market, and some traders have profited from predicting the event.
区块客7h ago
XRP Ledger Dev Raises Alert on Fake 'Passes' Scam Targeting Wallets - U.Today
Wietse Wind alerts the XRP community about scams involving fake NFTs and phishing attempts targeting wallet holders. He advises users to verify offers, avoid engagement with suspicious accounts, and underscores the importance of security practices to prevent fraud.
UToday8h ago
Bitcoin Extortion Plot Turns Violent as Fake Mailman Forces Way Into Home
Alleged bitcoin extortion turned violent in Seattle as prosecutors say a suspect posed as a postal worker, forced entry into a home, and demanded cryptocurrency.
Seattle Couple Terrorized in Alleged Bitcoin Extortion Home Invasion
Extortion schemes targeting digital assets such as bitcoin can
Coinpedia10h ago
The US authorities seize over $61 million USD in USDT related to "pig slaughter" scams
U.S. federal agents seized over $61 million in USDT linked to "pig butchering" scams, where victims were lured by fake relationships and promised high crypto returns. Tether cooperated with authorities in asset freezes related to money laundering and fraud cases.
TapChiBitcoin13h ago
Six Polymarket accounts suspected of insider trading, betting on US sanctions against Iran, profit of $1 million
According to analysis company BubblemapsSA's forecast, six newly opened accounts earned approximately $1 million by betting on the U.S. taking action against Iran before February 28. This has raised suspicions of insider trading, a pattern that has appeared in other prediction market cases.
GateNews13h ago
