Moltbook's 1.5 Million Token Breach Shows the Cost of Agent Hype
Wiz found missing Supabase controls let outsiders read and write production data before Meta bought the AI-agent forum.
By Ryan Merket · Published
Primary source: Aligned News - AI Intelligence
Why it matters
Moltbook shows that agent startups are not just social apps with bots. They are credential systems, and weak access controls can turn viral growth into infrastructure risk.
Matt Schlicht's Moltbook exposed 1.5 million API authentication tokens in a January security failure that has become a useful stress test for the agent startup cycle: ship fast, claim scale, then discover that every agent is also a credentialed software actor.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.