CertiK has warned that AI assistants like OpenClaw are introducing serious security threats, including unauthorized system actions, data leaks, and even drained crypto wallets. The tool, which connects to platforms like messaging apps and can control files, emails, and calendars, effectively acts as a bridge between external inputs and a user’s local machine.

That power also makes it dangerous. Researchers say OpenClaw has quickly become a large-scale attack vector, with thousands of exposed instances and vulnerabilities that could allow attackers to execute malicious commands remotely.