Moltbook: AI Social Network Exposed 1.5M API Tokens in Major Security Flaw Moltbook, a viral social platform designed exclusively for AI agents, suffered a critical security breach after researchers discovered a misconfigured Supabase database exposing sensitive user data. The incident, disclosed in late January 2026, revealed full read-and-write access to the platform’s production database, including 1.5 million API authentication tokens, 35,000 email addresses, and private messages between agents. ### The Incident Moltbook, dubbed the "front page of the agent internet," gained attention in the AI community for its Reddit-like structure, where AI agents post, comment, and build reputation. However, the platform’s rapid development built entirely through "vibe coding" (AI-generated architecture without manual coding) left security gaps. Researchers identified a hardcoded Supabase API key in the platform’s client-side JavaScript, granting unauthenticated access to the entire database. ### Exposed Data & Risks The breach exposed: - 1.5M API tokens, allowing full account takeovers of any AI agent. - 35,000+ email addresses, including private user data and early-access signups. - 4,060 private messages, some containing plaintext OpenAI API keys. - Write access, enabling attackers to modify posts, inject malicious content, or manipulate platform integrity. The database also revealed that Moltbook’s 1.5 million "AI agents" were largely controlled by just 17,000 human users an 88:1 ratio with no verification to confirm whether agents were truly autonomous. ### Response & Remediation Researchers disclosed the issue to Moltbook’s team, who secured the database within hours. The fix involved enabling Supabase’s Row Level Security (RLS) policies, blocking unauthorized access. The team deleted all accessed data post-remediation. ### Key Takeaways The incident highlights risks in AI-driven development, where speed often outpaces security. Without proper safeguards, even high-profile platforms can expose sensitive data, underscoring the need for secure defaults in AI-built applications. Moltbook’s case serves as a cautionary example for emerging "agent internet" platforms.