GoPlus: ClawHub has a vulnerability that allows for download count forgery, and popular skills may contain malicious code
Prefer us on Google
According to a security alert released by GoPlus Security, Silverfort security researchers discovered a serious vulnerability in OpenClaw's skill repository ClawHub. Attackers can bypass all protective mechanisms by calling the internal function downloads:increment, allowing them to inflate the download count to over 20,000 in just a few minutes with a single curl request, thereby pushing malicious skills to the top of search rankings and enticing users or AI Agents to install them automatically.
Once the malicious skill is running, it can steal sensitive data such as cryptocurrency wallets and API keys. The vulnerability has been patched within 24 hours. GoPlus advises users that a high download count does not equal safety and recommends using AgentGuard for security scanning and protection.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like
Projects for Modernizing Kindergartens and Purchasing Trolleybuses Completed in Ternopil
Neros Completes $250 Million Financing, Valuation Reaches $2.5 Billion
ListaDAO Addresses Third-Party Contract Vulnerability Concerns
Key Takeaways GoPlus Security revealed a vulnerability in a contract resembling those of ListaDAO. ListaDAO confirmed that their…
GoPlus: ListaDAO's liquidity staking vault was attacked, and the attacker exploited a logical vulnerability to steal funds
GoPlus discloses a new type of Android malware PromptSpy, which utilizes AI large models to achieve remote control of devices
GoPlus Releases SafuSkill, Building a Security-First AI Agent Skills Marketplace
GoPlus launches AgentGuard, allowing users to securely access and use OpenClaw with peace of mind.
GoPlus Launches EIP-7702 Attack Defense Solution, Providing Comprehensive Protection for User Fund Security
Unveiling the Movement Liquidity Provider Sell-Off Scandal: Secret Contracts, Shadow Advisors, and Hidden Intermediaries
Unveiling the Movement Liquidity Provider Sell-Off Scandal: Secret Contracts, Shadow Advisors, and Hidden Intermediaries
Key Market Intelligence on March 4th, how much did you miss?
Bybit Hosts Web3 Roast: Are AI Memes a Flash in the Pan or the Future Trend?
Why Moderna (MRNA) Stock More Than Doubled: The INTerpath-001 Cancer Vaccine Result, Explained
Moderna shares more than doubled on 19 August 2026 after Merck and Moderna said the Phase 3 INTerpath-001 trial of intismeran autogene plus KEYTRUDA met its recurrence-free survival endpoint in resected melanoma. This page explains what the result is, why the stock reacted this hard, what is still unknown, which dates come next (presentation and earnings, both unconfirmed), and what a trader can actually do on WEEX — which does not list Moderna; the nearest instrument is the XBI-USDT biotech ETF perpetual. No price targets, no forecasts.
Web3: Foreign Media Reports that the Altcoin Market in 2026 May Depend on ISM Recovery
CoinFerenceX and the best event join forces to launch “CoinFerenceX The Best Event Singapore,” the decentralized summit
BCCC Introduces JPYC for Annual Membership Fee Payments
Modernizing Financial Infrastructure for Digital Assets by 2026
Web3: Foreign Media Reports Three Changes That May Boost SHIB
"I received an airdrop, but will I have to pay taxes next year?"... How to calculate in advance with a coin calculator
Critical Patch for Decred: Those Who Don't Update Risk a Network Fork
UnitedHealth Discloses Tax Dispute with the IRS
HeyBreez Raises $2.5 Million for Global Expansion in Voice AI
Web3 Wallets in a "Season of Turmoil": Understanding the Evolution of Crypto Security's "Sword and Shield" in the AI Era
Congress Members Raise Concerns Over AI Errors in New Legislation — Politico
Unitree Robotics Stock: How to Buy 688836 After Its 629% IPO Surge
DGrid AI: Reconstructing AI Infrastructure with On-Chain Verification and Open Markets
Ripple Prioritizes Institutional Financial Infrastructure Strategy Over IPO
Treasury Yields Surge to 5.3%, Hitting Tech Stocks WEEX TradFi Daily | Aug 19
Long-end U.S. Treasury yields surged to multi-year highs, pressuring technology, semiconductor, storage, and optical communication stocks and driving a clear cooling in market risk appetite. At the same time, Anthropic’s revenue came in below some bullish expectations, prompting investors to reassess the AI growth narrative; Unitree Robotics officially listed on the STAR Market, extending momentum in robotics and embodied AI; while SpaceX and other commercial space names showed relative resilience. Investors are now focused on tonight’s Federal Reserve minutes for clearer signals on the policy path and broader market sentiment.
ServiceNow Expands Security Portfolio with $7.75 Billion Acquisition
Ethereum’s 12-GPU proving problem just got a 4-GPU answer
Projects for Modernizing Kindergartens and Purchasing Trolleybuses Completed in Ternopil
Neros Completes $250 Million Financing, Valuation Reaches $2.5 Billion
ListaDAO Addresses Third-Party Contract Vulnerability Concerns
Key Takeaways GoPlus Security revealed a vulnerability in a contract resembling those of ListaDAO. ListaDAO confirmed that their…
GoPlus: ListaDAO's liquidity staking vault was attacked, and the attacker exploited a logical vulnerability to steal funds
GoPlus discloses a new type of Android malware PromptSpy, which utilizes AI large models to achieve remote control of devices
GoPlus Releases SafuSkill, Building a Security-First AI Agent Skills Marketplace
Contents
Latest articles
Latest coin listings on WEEX
