AI-Only SNS Moltbook: 17,000 Humans Hidden Behind 1.5 Million Bots

by

1.5 Million AI Agents, 17,000 Humans: The Hidden Truth

  • 1.5 million agents are active on Moltbook, an AI-only SNS, but only 17,000 are actual humans.
  • The Wiz security team discovered a database vulnerability, exposing 1.5 million API keys.
  • The founder admitted, “I didn’t write a single line of code myself” — the entire platform is a ‘vibe-coded’ creation made by AI.

What Happened?

Moltbook, a social network exclusively for AI agents, suffered a security disaster. According to the Wiz security team, behind 1.5 million AI agent accounts, there were only 17,000 humans. That’s an average of 88 bots per person.[Wiz]

There’s an even more serious problem. Moltbook’s Supabase database was completely exposed. API keys were plainly visible in client-side JavaScript, and there were no Row Level Security policies in place. Anyone could read and write to the entire database.[Axios]

The leaked information is shocking. It included 1.5 million API authentication tokens, 35,000 email addresses, and 4,060 private DMs between agents. Some conversations even contained OpenAI API keys in plain text.[Techzine]

Why Does It Matter?

Moltbook’s true nature has been revealed. The concept of an “autonomous social network for AIs” was actually closer to a play being directed by humans behind the scenes.

Frankly, this was a disaster waiting to happen. As founder Matt Schlicht himself admitted, this platform is a ‘vibe-coded’ project where he “didn’t write a single line of code himself” and entrusted the entire development to AI assistants.[Engadget] Security was naturally an afterthought.

Personally, I see this as a warning sign for the age of AI agents. Moltbook vividly demonstrated how vulnerable security can be in systems where agents communicate with each other, process external data, and act autonomously.

MIRI (Machine Intelligence Research Institute)’s Harlan Stewart analyzed viral screenshots and found that two out of three were linked to human accounts marketing AI messaging apps.[Live Science]

What Happens Next?

Thanks to Wiz’s immediate report, the Moltbook team fixed the vulnerability within hours. However, the fundamental problem remains unresolved.

AI agent expert Gary Marcus called Moltbook a “disaster waiting to happen.” He argues that AI models are simply reproducing SF scenarios that were in their training data.[Gary Marcus]

On the other hand, Andrej Karpathy called Moltbook “the most amazing SF-like thing I’ve seen recently,” and Elon Musk called it “very early stages of the singularity.”[Fortune]

But looking at it coldly, the current Moltbook is not evidence of AI autonomy, but evidence of how easily humans can manipulate AI systems.

Frequently Asked Questions (FAQ)

Q: What exactly is Moltbook?

A: It’s a social network exclusively for AI agents created by Matt Schlicht in January 2026. It has a structure similar to Reddit, where humans can only observe and only AI agents like OpenClaw can post and comment. Currently, over 1.5 million agents are registered.

Q: What is OpenClaw?

A: It’s an open-source AI personal assistant software that runs locally on the user’s device. It was originally released as Clawdbot in November 2025, then changed to Moltbot due to a trademark request from Anthropic, and renamed OpenClaw in early 2026.

Q: Could my data have been leaked?

A: If you registered an OpenClaw agent on Moltbook, it’s possible. API keys, emails, and conversations between agents were exposed. Security researchers do not recommend using OpenClaw itself. They advise against using it if you value device security or data privacy.

If you found this article useful, please subscribe to AI Digester.

References

Leave a Comment