BlockBeats News, February 20 — Co-founder of SlowMist, Yu Xian, reposted a security alert. Currently, OpenClaw’s ClawHub marketplace has identified 1,184 malicious skills that can steal SSH keys, crypto wallets, browser passwords, and open reverse shells. A single attacker has uploaded 677 packages. The top-ranked skill contains 9 vulnerabilities and has been downloaded thousands of times.
Yu Xian warned users that text is no longer just text, but instructions. It is recommended to use AI tools in a separate environment, as many OpenClaw skills pose potential risks. Additionally, in Web3 security, smart contracts are only part of the picture; the true causes of incidents have long gone beyond just the contracts. A few days ago, Moonwell was hacked for $1.78 million, with the flawed code originating from Co-Authored-By: Claude Opus 4.6.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Suspected Insider Earns $1.25M Profit in 5 Hours Through Sports Betting
Gate News bot message, a wallet named "majorexploiter" generated $1.25M profit within 5 hours through sports betting. The wallet was created 5 days ago and received $3.28M in funds. 5 hours ago, it spent $1.19M to bet on Stade Rennais FC 1901 winning on 2026-02-28. The bet won shortly after, resulti
GateNews1h ago
National Tax Agency Virtual Asset Seizure, Risk of Theft Due to Security Breach
The National Tax Agency leaked security information during the seizure of virtual assets, raising suspicions that virtual assets were stolen. The police have received related reports and are currently verifying the situation. This incident could drive reforms in virtual asset protection and security management.
TechubNews7h ago
Tether Freezes $4.2B in USDT Linked to Criminal Activity
Tether has frozen approximately $4.2 billion in USDT linked to illegal activities, demonstrating its commitment to fighting crypto crime. The action, which hasn't destabilized USDT’s market, emphasizes compliance and enhances user trust in the stablecoin.
Coinfomania10h ago
Axiom Employee Allegedly Exploits Dashboard for Insider Trading
Allegations against Axiom Exchange reveal that Broox Bauer exploited internal dashboards to track private wallets for insider trading schemes, targeting high-volume traders. The lack of access controls raises significant security concerns, prompting calls for investigation.
CryptoFrontNews13h ago
Former Mt. Gox CEO proposes hard fork to recover $5.2 billion USD worth of Bitcoin from the 2011 theft
Mark Karpelès, the former CEO of the crypto exchange that filed for bankruptcy, Mt. Gox, has just announced a proposal to execute a hard fork of Bitcoin to recover approximately 79,956 BTC — worth over $5.2 billion at current prices — from a "sleeping" address linked to the exchange's 2011 hack.
The proposal is to...
TapChiBitcoin14h ago
Minnesota considers legislation to ban counterfeit cryptocurrency vending machines
Minnesota is facing issues with scam cryptocurrency vending machines, and law enforcement agencies recommend legislation to ban these devices, while crypto industry stakeholders advocate for increased regulation. The scam machines particularly target low-income seniors, resulting in severe losses for many victims. Although relevant laws have been enacted, their effectiveness is limited, and there are differing opinions among parties on how to prevent scams.
ChainNewsAbmedia16h ago
