OpenClaw GitHub Phishing Campaign

2026-01-01

Scammers exploit a brief gap in OpenClaw's social media account transition (prompted by an Anthropic trademark notice over the name 'Clawdbot') to promote a fake CLAWD token. The token allegedly reaches a market capitalization of approximately $16 million before collapsing by over 90%.

2026-02-01

OpenClaw founder Peter Steinberger bans all cryptocurrency discussion on the project's Discord server following the CLAWD fake token incident. Steinberger publicly disavows any crypto connection and states the project will never issue a token.

2026-03-12

Threat actor creates throwaway GitHub accounts and begins tagging developers who starred OpenClaw-related repositories in fake issue threads, offering $5,000 CLAW token giveaways and directing victims to token-claw[.]xyz via Google LinkShare redirects.

2026-03-12

Throwaway GitHub accounts used in the phishing campaign are deleted within hours of the campaign's launch, limiting the active exposure window but not eliminating the infrastructure.

2026-03-19

OX Security publishes full technical disclosure of the campaign, identifying the phishing domain token-claw[.]xyz, C2 server watery-compost[.]today, malicious JavaScript file eleven.js, threat actor wallet address 0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5, and the nuke evasion function. No confirmed victims are reported at time of publication.

2026-03-19

CoinDesk, Decrypt, CSO Online, HackRead, CyberNews, and multiple crypto publications pick up the OX Security report, broadening awareness of the campaign among developers.

2026-06-15

Campaign described as active and ongoing as of June 2026, with continued abuse of the OpenClaw brand and GitHub notification system to target developers.