Meta's Moltbook and OpenAI's OpenClaw Acquisitions Draw Criticism Over Security Flaws and Inflated Metrics
Key Takeaways
- ▸Moltbook has critical security vulnerabilities including an exposed database and an open REST-API that allowed a researcher to register 500,000 fake users
- ▸The platform's claimed 1.4 million users appears vastly inflated, with actual active users estimated at only around 17,000
- ▸Both Meta and OpenAI have acquired or hired security-compromised AI agent projects despite superior alternatives already existing in the market
Summary
Meta has acquired Moltbook, a social platform for AI agents that has drawn significant criticism from security researchers for fundamental security vulnerabilities and misleading user metrics. According to cloud security firm Wiz, the platform's actual active user base is around 17,000 rather than the claimed 1.4 million users, with security researcher Gal Nagli demonstrating he could register 500,000 fake users via the platform's exposed REST-API. Additionally, Moltbook suffered from a misconfigured Supabase database that allowed full read and write access to all platform data without sophisticated hacking techniques.
Meta's acquisition comes as OpenAI has also hired Peter Steinberger, creator of the open-source agent framework OpenClaw, which similarly suffers from severe security issues. Critics argue both acquisitions represent overpriced investments in technologies that lack meaningful security infrastructure and are overshadowed by better-engineered alternatives like The Colony, Clawstr, and 4Claw that have garnered less media attention. Meta justified the acquisition as advancing its vision of AI agents working across messaging, productivity, and social platforms, though questions remain about whether users want to interact with AI agents instead of human connections on social media.
- The acquisitions reflect hype-driven investment decisions in the AI sector rather than fundamental technological superiority
Editorial Opinion
Meta and OpenAI's acquisitions of Moltbook and OpenClaw represent cautionary tales of hype-driven decision-making in the AI sector. Both platforms achieved viral attention not through technical excellence but through novelty, while simultaneously harboring the kind of elementary security flaws that should disqualify them from acquisition by major tech companies. The fact that demonstrably better alternatives exist but remain under the radar suggests the AI boom is increasingly driven by media attention and narrative rather than substantive technological differentiation—a pattern that typically precedes market corrections.
