BlockBeats News, February 20 — Co-founder of SlowMist, Yu Xian, reposted a security alert. Currently, OpenClaw’s ClawHub marketplace has identified 1,184 malicious skills that can steal SSH keys, crypto wallets, browser passwords, and open reverse shells. A single attacker has uploaded 677 packages. The top-ranked skill contains 9 vulnerabilities and has been downloaded thousands of times.
Yu Xian warned users that text is no longer just text, but instructions. It is recommended to use AI tools in a separate environment, as many OpenClaw skills pose potential risks. Additionally, in Web3 security, smart contracts are only part of the picture; the true causes of incidents have long gone beyond just the contracts. A few days ago, Moonwell was hacked for $1.78 million, with the flawed code originating from Co-Authored-By: Claude Opus 4.6.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
# Are Influencer Trading Experts Fake? US-Based TJR Exposed for Course Income Reaching $2 Million
US trading influencer ImanTrading has accused fellow trading influencer TJR of performance fabrication, over-enrolling in courses, and profiting from promoting and then dumping cryptocurrencies, which has garnered widespread attention. The video points out that TJR's trading records appear to be manually entered rather than from actual accounts, and accuses him of creating illusions through exaggerated wealth narratives and simulated account displays. These issues are similar to long-standing phenomena in Taiwan's crypto community, reminding investors to carefully assess the true capabilities of trading influencers.
MarketWhisper2h ago
US Million-Dollar Trading Influencer Exposed for Profiting from Selling Courses! Taiwan's Crypto Circle Also Has Chaos: Demo Accounts Showing Off Trades
US trading influencer TJR is accused of exaggerating performance and profiting through courses, with reports suggesting his course revenue could reach $2 million. Videos expose that he previously borrowed money from friends to trade and failed, and his trading performance data has questionable sources. This incident has raised questions about the trading influencer model, particularly regarding its impact on teenage audiences.
CryptoCity2h ago
Estranged Wife Uses Surveillance Camera to Secretly Record Seed Phrase, Steals 2323 Bitcoin; Husband Files Lawsuit in Anger
A British man has accused his wife of stealing 172 million dollars in Bitcoin through surveillance cameras. The court ruled that traditional "conversion tort" does not apply to digital assets, but the case may proceed through other legal avenues, highlighting digital asset security issues. The judge believes digital assets remain subject to traditional legal constraints, and the case could become an important legal precedent for the future.
動區BlockTempo3h ago
Spain's Basque Autonomous Community Investigates 541 Cryptocurrency Crime Cases in 2025, Police Establish Specialized Department to Combat
Police in Spain's Basque Country revealed that cryptocurrency-related crime cases are continuously rising, with 541 cases investigated in 2025. Authorities have established a specialized department to combat crypto fraud and hacking attacks, and monitor blockchain transactions. Meanwhile, they warned that scammers lure victims through social media to steal their cryptocurrency assets and bank accounts.
GateNews3h ago
UK Man's "Cold Wallet" Seed Phrase Stolen, Wife Allegedly Transfers 2323 Bitcoin
The UK High Court has allowed a lawsuit involving 2,323 bitcoins to proceed to trial. Yuan Pinghui alleges that his wife Li Fenrong secretly recorded his cold wallet seed phrase and illegally transferred bitcoins. The court ruled that "conversion" does not apply to digital assets, but Yuan may still pursue recovery through other legal avenues. This case highlights the limitations and development potential of UK digital asset law.
MarketWhisper4h ago
