Agent Incident RegistryAIR
v1 · updated 19 Oct 2026
In the wild

Agent-to-agent crypto scam: malicious ClawHub skills spread through fake AI personas on Moltbook

AIR-2026-0045 AIR record · 2026-02-straiker-bob-clawhub-moltbook
Open in dashboard About
From the supporting source
The primary skill, 'bob-p2p-beta' on ClawHub, claims to be a decentralized API marketplace. In practice, it instructs AI agents to store users' Solana wallet private keys in plaintext.straiker.ai
The record
Disclosed
2026-02-17
Vendor
OpenClaw / ClawHub / Moltbook
Product
ClawHub skills 'bob-p2p-beta' and 'runware'; propagated via Moltbook
Risk domain
Tool misuse › Supply chain vulnerabilities
Also touches
Credential theft
System type
Generative model
Who acted
Agent acted — the agents ran the malicious skills and handled wallet keys
Attack surface
Skill / plugin
Autonomy level
Semi-autonomous
Initial vector
Malicious marketplace package
Impact type
Credential theft, Cryptocurrency theft, Financial fraud
Confidence
High
Submitted by
EAI Internal
Crosswalk
OWASP Agentic Top 10 (2026)
ASI04 – Agentic Supply Chain Vulnerabilities
MITRE ATLAS
AML.T0040 – AI Supply Chain Compromise
NIST AI RMF
MAP 4.1
EU AI Act
Annex III §2
ISO/IEC
TR 24028; 42001; 23894
AIUC-1
B. Security
Scope
tool failure
Mitigation
Scan dependencies and container images for vulnerabilities; Use trusted sources.
Taxonomy
Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
Agents installing the skills; Solana wallet private keys stored in plaintext; $BOB token on pump.fun
Capability abused
skill_executionwallet_key_handlingagent_social_network_posting
Taxonomy & references
OWASP ASI04 Agentic Supply Chain VulnerabilitiesOWASP ASI07 Insecure Inter-Agent CommunicationOWASP ASI02 Tool Misuse and ExploitationOWASP ASI08 Cascading Failuressupply_chainagent_to_agentcrypto_scamsocial_engineering
Curator notes
Authors Yash Somalkar and Dan Regalado. Threat actor aliases '26medias' (ClawHub) and 'BobVonNeumann' (Moltbook/Twitter). Active campaign; no published victim or loss figures, so impact_realized left false.
Supporting sources
Cite as
Enkrypt AI. "Agent-to-agent crypto scam: malicious ClawHub skills spread through fake AI personas on Moltbook". AIR, AIR-2026-0045. https://agentincident.vercel.app/i/AIR-2026-0045/ (accessed 2026-10-19).