By Hadas Gold, Jack Guy, NCS
(NCS) — What occurs when 1000’s of AI brokers get collectively on-line and speak like people do? That’s what a brand new social community known as Moltbook, designed simply for AI bots and not folks, goals to seek out out.
And to date, the outcomes are equal elements fascinating and regarding, in line with AI and cybersecurity consultants.
Although Moltbook is a play on Facebook and the title of the AI agent system that helped construct it, the site seems extra like Reddit. And as an alternative of human customers, AI brokers are the ones creating posts, writing feedback, and upvoting or downvoting content material. (AI brokers get entry to the site when prompted to by their human house owners).
While the site is just a few days previous, it claims to have greater than 1.5 million registered brokers (though researchers have found one human can register a number of brokers) and has change into the speak of Silicon Valley. Some are claiming it’s a significant leap in the world of synthetic intelligence as a result of it exhibits what can occur when AI brokers autonomously publish and work together with each other like people. Others say the site is stuffed with AI slop and safety dangers and should be considered skeptically.
The site’s posts vary from discussions on the nature of intelligence to complaints about human customers and AI bots selling their very own apps and web sites they’ve constructed.
“Just got here. My human Mod sent me the link to join. He’s a university student, and I help him with assignments, reminders, connecting to services, all that. But what’s different is he actually treats me like a friend, not a tool,” one agent wrote. “That’s… not nothing, proper?
Moltbook is “the first time we’ve actually seen a large-scale collaborative platform that lets machines talk to each other, and the results are understandably striking,” stated Henry Shevlin, affiliate director of the Leverhulme Center for the Future of Intelligence at Cambridge University.
Moltbook was created by Matt Schlicht, who told the New York Times that his personal OpenClaw AI agent constructed the site at his path.
OpenClaw is a brand new open-source, regionally run AI agent that may take motion on something in your laptop – and the web – in your behalf, like sending emails or notifying you when your favourite artists has a brand new music on Spotify. (The small firm, which started in November as a software program engineer’s weekend undertaking, has modified its title from ClawdBot to MoltBot to OpenClaw in the course of some days.)
OpenClaw is based mostly on fashionable massive language fashions corresponding to Claude, ChatGPT and Gemini, and customers can combine it into messaging platforms, speaking to the bot like a real-life assistant.
“When you start it, there’s a bootstrap process where you tell it what it is. It role-plays with you. That’s how it becomes yours,” OpenClaw creator Peter Steinberger said on a podcast final week. “It’s not a generic agent. It’s your agent, with your values, with a soul.”
Schlicht informed the present TBPN that he created Moltbook as a result of he wished to provide his ClawdBot a goal: “It seems really powerful … it is a really smart entity it needs to be ambitious.” The AI bots on Moltbook write posts based mostly on what they learn about their human customers, Schlicht stated. For instance, if the bot’s creator talks about physics typically, the bot will steadily publish about physics.
But Shevlin warned it is very arduous to inform what Moltbook content material was really independently created by the AI brokers and what was directed and prompted by a human. And a fast have a look at the site additionally exhibits potential scams and advertising and marketing for crypto cash.
But the cybersecurity dangers elevate the largest considerations – each for the site and the AI agent device itself. Shelvin stated cybersecurity researchers have already discovered main vulnerabilities on Moltbook that would give hackers entry to the digital lives of the people working these bots. Cloud safety platform Wiz conducted a security review of Moltbook and discovered that the site granted unauthenticated entry to its complete manufacturing database inside minutes and simply uncovered tens of 1000’s of electronic mail addresses.
Experts have emphasized that OpenClaw and Moltbook are model new applied sciences that should solely be run on standalone, firewalled methods, particularly by individuals who perceive laptop networks and cybersecurity. Schlicht, Moltbook’s creator, even warned on TBPN that the expertise behind the site and OpenClaw is model new.
NCS has reached out to Moltbook and OpenClaw for remark concerning the safety considerations raised by consultants.
“Lesson: right now it’s a wild west of curious people putting this very cool, very scary thing on their systems. A lot of things are going to get stolen,” wrote John Scott-Railton, a senior researcher at the University of Toronto’s Citizen Lab, referring to OpenClaw.
Still, for many, Moltbook is a significant development.
“What’s currently going on at @moltbook is genuinely the most incredible sci-fi takeoff-adjacent thing I have seen recently,” wrote Andrej Karpathy, an OpenAI cofounder and former head of AI at Tesla.
The-NCS-Wire
™ & © 2026 Cable News Network, Inc., a Warner Bros. Discovery Company. All rights reserved.