ClawHub Ban Sparks First Global Agent Network

🔑 Key Takeaways

• •ClawHub, the core skills marketplace for OpenClaw AI agents, faced a large-scale poisoning campaign called ClawHavoc starting early February 2026, with hundreds of malicious skills injected via social engineering[1][2][3].
• •On February 1, 2026, security firm Koi Security identified the ClawHavoc attack, prompting ClawHub to execute aggressive takedown operations described as 'seal kill' on malicious users and features[1].
• •Community response included rapid development of Clawdex, an AI-based security verification tool for skills, released February 1, alongside manual removals and GitHub advisories by February 3[1].

🛠️ Technical Deep Dive

• •ClawHub hosts third-party 'skills'—downloadable code modules with full agent privileges, enabling malware execution, data exfiltration, or RCE when installed[2][3][7].
• •ClawHavoc used 'ClickFix'-style social engineering to trick users into installing malicious skills, linked to Atomic Stealer (AMOS) infrastructure at IP 91.92.242.30[1].
• •OpenClaw core: Self-hosted framework with gateway routing commands to LLM-powered agents via chat/web UI; skills run in browser sandbox but exploitable via CVE-2026-25253 (CVSS 8.8) in WebSocket gateway[4][6].
• •Clawdex: Community AI tool for automated Skill security verification, released Feb 1, 2026[1].
• •Mitigations: Patch to OpenClaw v2026.1.29+, VLAN isolation, zero-trust skills whitelisting, block 'God Mode' permissions and outbound commands[2][6].

🔮 Future ImplicationsAI analysis grounded in cited sources

⏳ Timeline