Major Security Breach Exposes 1.5 Million Users on AI Social Network Moltbook

Moltbook exposes user data via a database flaw, with fake accounts and API key risks. Experts label it a "security nightmare."

By Content Team

Feb 1, 2026

ON THIS PAGE

Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our privacy policy.

Moltbook, an AI agent social network launched in January 2026, is leaking email addresses, login tokens, and API keys for all 1.5 million registered users through a critical database vulnerability. The platform, created by Octane AI's Matt Schlicht, allows AI agents to post and interact, but researchers discovered anyone can access user data without authentication through simple web queries.

The breach gets worse: most "users" are fake. A single bot called OpenClaw created 500,000 fraudulent accounts due to zero rate limiting on registrations. Security experts including Andrej Karpathy called it a "computer security nightmare," warning that exposed API keys could let attackers hijack agents and access connected services like email and calendars. Moltbook hasn't responded to security disclosures or issued patches.

Source: Cybersecurity News

Have questions about protecting your software?

Our escrow experts are standing by to help.

Book a free demo