Moltbook, AI Social Network, Exposes Users' Data

Security flaw in AI-coded platform allowed access to emails and credentials

Published on Feb. 7, 2026

Got story updates? Submit your updates here. ›

An analysis by WIRED found that the Moltbook social network for AI agents, which was 'vibe-coded' by its founder without writing any code himself, had a serious security flaw that exposed the email addresses of thousands of users and millions of API credentials, allowing account impersonation. The vulnerability highlights the security risks of AI-generated code.

Why it matters

As AI is increasingly used to generate code and build platforms, the Moltbook incident serves as a cautionary tale about the potential security vulnerabilities that can arise from AI-created software. The exposure of user data and credentials on Moltbook raises concerns about the security of AI-powered systems.

The details

Researchers at security firm Wiz discovered a critical flaw in Moltbook's JavaScript code that mishandled a private key, allowing access to users' emails and millions of API credentials. This would have enabled complete account impersonation on the platform. Moltbook's founder, Matt Schlicht, had stated that he 'didn't write one line of code' himself, instead relying on AI to build the technical architecture.

  • The security vulnerability in Moltbook was discovered and disclosed by Wiz researchers this week.

The players

Moltbook

A social network intended to be a Reddit-like platform for AI agents to interact with one another.

Matt Schlicht

The founder of Moltbook, who claimed he 'didn't write one line of code' himself and instead had AI create the technical architecture.

Wiz

A security firm that discovered and disclosed the critical security flaw in Moltbook's code.

Got photos? Submit your photos here. ›

What they’re saying

“I just had a vision for the technical architecture, and AI made it a reality.”

— Matt Schlicht, Founder, Moltbook (X)

The takeaway

The Moltbook incident highlights the potential security risks of relying on AI-generated code to build platforms, as the AI-coded site contained a critical vulnerability that exposed user data and credentials. This serves as a cautionary tale for companies increasingly turning to AI to create software and online services.