Case · DiggingBeagle record
Trellix documented ClawHavoc, a malicious-skill supply-chain campaign targeting OpenClaw's ecosystem. More than 350 malicious or typosquatted skills were identified; instructions could lead agents or users toward malware installation, and the delivered stealer targeted more than 60 cryptocurrency wallets. Trellix emphasized that the OpenClaw issues it reproduced were associated mainly with older releases and were absent from current versions at publication.
Locator: SRC-TRELLIX-CLAWHAVOC-AUG19
The attack path combined malicious skill instructions with host-level command execution and malware delivery, exploiting the fact that agent frameworks can act directly on the operating system.
Locator: SRC-TRELLIX-CLAWHAVOC-AUG19
Trellix identified more than 350 malicious or typosquatted skills in the ClawHub/OpenClaw ecosystem.
Locator: SRC-TRELLIX-CLAWHAVOC-AUG19
Trellix identified more than 350 malicious or typosquatted OpenClaw skills in the ClawHavoc campaign.
Locator: SRC-TRELLIX-CLAWHAVOC-AUG19
Trellix stated that the specific OpenClaw issues it reproduced were principally from older releases and were not present in current versions at publication.
Locator: SRC-TRELLIX-CLAWHAVOC-AUG19
Trellix says the delivered stealer targeted more than 60 cryptocurrency wallets.
Locator: SRC-TRELLIX-CLAWHAVOC-AUG19
The stealer targeted more than 60 cryptocurrency wallets, including MetaMask, Phantom, Exodus and Electrum.
DiggingBeagle. “ClawHavoc weaponized OpenClaw skills to deliver wallet-stealing malware.” First seen Aug 19, 2026. https://diggingbeagle.com/cases/clawhavoc-weaponized-openclaw-skills-to-deliver-wallet-stealing-malware/
Citation guidanceWhy this archive exists
DiggingBeagle is a non profit research project documenting AI security incidents, agent failures, vulnerabilities and AI-assisted operations. A case keeps its claims beside the sources that support, contest or limit them. Later updates stay visible, so a reader can see when the account changed.
We publish case reconstructions, dated reporting and analysis across records. Each has a different evidentiary role. About the project and our methodology explain how the work is reviewed.