BlockBeats News, February 20 — Co-founder of SlowMist, Yu Xian, reposted a security alert. Currently, OpenClaw’s ClawHub marketplace has identified 1,184 malicious skills that can steal SSH keys, crypto wallets, browser passwords, and open reverse shells. A single attacker has uploaded 677 packages. The top-ranked skill contains 9 vulnerabilities and has been downloaded thousands of times.
Yu Xian warned users that text is no longer just text, but instructions. It is recommended to use AI tools in a separate environment, as many OpenClaw skills pose potential risks. Additionally, in Web3 security, smart contracts are only part of the picture; the true causes of incidents have long gone beyond just the contracts. A few days ago, Moonwell was hacked for $1.78 million, with the flawed code originating from Co-Authored-By: Claude Opus 4.6.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Bitcoin Extortion Plot Turns Violent as Fake Mailman Forces Way Into Home
Alleged bitcoin extortion turned violent in Seattle as prosecutors say a suspect posed as a postal worker, forced entry into a home, and demanded cryptocurrency.
Seattle Couple Terrorized in Alleged Bitcoin Extortion Home Invasion
Extortion schemes targeting digital assets such as bitcoin can
Coinpedia1h ago
The US authorities seize over $61 million USD in USDT related to "pig slaughter" scams
U.S. federal agents seized over $61 million in USDT linked to "pig butchering" scams, where victims were lured by fake relationships and promised high crypto returns. Tether cooperated with authorities in asset freezes related to money laundering and fraud cases.
TapChiBitcoin4h ago
Six Polymarket accounts suspected of insider trading, betting on US sanctions against Iran, profit of $1 million
According to analysis company BubblemapsSA's forecast, six newly opened accounts earned approximately $1 million by betting on the U.S. taking action against Iran before February 28. This has raised suspicions of insider trading, a pattern that has appeared in other prediction market cases.
GateNews4h ago
Suspected Insider Earns $1.25M Profit in 5 Hours Through Sports Betting
Gate News bot message, a wallet named "majorexploiter" generated $1.25M profit within 5 hours through sports betting. The wallet was created 5 days ago and received $3.28M in funds. 5 hours ago, it spent $1.19M to bet on Stade Rennais FC 1901 winning on 2026-02-28. The bet won shortly after, resulti
GateNews7h ago
National Tax Agency Virtual Asset Seizure, Risk of Theft Due to Security Breach
The National Tax Agency leaked security information during the seizure of virtual assets, raising suspicions that virtual assets were stolen. The police have received related reports and are currently verifying the situation. This incident could drive reforms in virtual asset protection and security management.
TechubNews13h ago
Tether Freezes $4.2B in USDT Linked to Criminal Activity
Tether has frozen approximately $4.2 billion in USDT linked to illegal activities, demonstrating its commitment to fighting crypto crime. The action, which hasn't destabilized USDT’s market, emphasizes compliance and enhances user trust in the stablecoin.
Coinfomania16h ago
