OpenClaw’s rise draws phishing campaign targeting developers’ crypto wallets

Malicious cyber actors are exploiting the growing popularity of the open-source AI agent project OpenClaw with a phishing campaign to drain developers’ crypto wallets, cybersecurity firm OX Security said.

In a report published Wednesday, OX said the threat actor created fake GitHub accounts, opened issue threads in attacker-controlled repositories, and tagged dozens of developers claiming they had been selected to receive $5,000 in “CLAW” tokens. 

Attackers directed victims to a malicious site, tricking them into connecting their wallets to claim fraudulent rewards. According to OX, the webpage was an almost identical clone of OpenClaw’s official website, but with one critical addition: a “Connect your wallet” button designed to initiate wallet theft. 

OX said the campaign spread via GitHub repositories and email outreach to appear as legitimate extensions or tools tied to the OpenClaw ecosystem. 

The full scale of the activity remains unclear. The Block has reached out to OX Security for further information.

Fraudulent outreach

The phishing campaign coincides with OpenClaw’s growing adoption among developers and small businesses seeking to automate workflows. As of today, OpenClaw’s GitHub page has gained over 324,000 stars, ranking ninth among all repositories globally.

Last month, OpenClaw creator Peter Steinberger joined OpenAI, adding to the project’s visibility. Operating under an independent foundation, OpenClaw continues as an open-source initiative supported by OpenAI.

Steinberger recently warned users that any crypto-themed outreach invoking OpenClaw should be treated as fraudulent. 

“Folks, if you get crypto emails from websites claiming to be associated with OpenClaw, it’s ALWAYS a scam,” Steinberger wrote Wednesday on X, adding that the project is non-commercial and would never conduct such promotions. 

OX also suggested that users block the malicious domains token-claw[.]xyz and watery-compost[.]today, and treat any GitHub issue promoting token giveaways as suspicious.

© 2026 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

 

Icon Bitcoin Cryptocurrency

Trade Crypto On Coinhub Exchange

Trade Crypto On Coinhub Exchange

Stay ahead of the market by turning news insights into trading opportunities. With Coinhub Exchange, you can seamlessly buy, sell, and manage your digital assets, all in one secure platform. Take advantage of real-time market insights, deep liquidity, and fast execution for your favorite cryptocurrencies. Don’t just read about it — trade crypto now!

Disclaimer

The content of this article shown by Coinhub News, powered by The Block, is for informational purposes only and should not be construed as financial, legal, tax, or investment advice. Coinhub News and its affiliates are not a licensed financial advisor, legal advisor, broker, or tax advisor, and ... should not be considered as professional advice or a recommendation to engage in any specific investment, legal decision, or financial transaction. Cryptocurrency markets are highly speculative and volatile. Readers should perform their own independent research and consult with a qualified professional before making any financial or legal decisions. The opinions expressed in this article are those of the author and do not necessarily represent the views or opinions of the Company of its affiliates. Additionally, the Company does not make any representations or warranties regarding the accuracy, timeliness, reliability, or completeness of any information in this article. By accessing this content, you acknowledge that any reliance on the information contained in this article is solely at your own risk. The Company is not responsible for any financial losses, legal disputes, or other damages that may arise from reliance on this content or from any investment or legal decisions based on the information provided. Investing in cryptocurrencies involves substantial risks, including the risk of losing your entire investment, and you should carefully consider whether it is appropriate for your circumstances.

Read more

💹 Related News

🔥 Popular News

Referral Reward Program – Earn Commissions!  Learn More Icon Long Arrow