The $16 Million Clawdbot Crypto Scam: How Scammers Hijacked a Rebrand in 10 Seconds

On January 27, 2026, Peter Steinberger had a problem.

Anthropic, the company behind Claude, had just sent a trademark request. The name "Clawdbot" was too similar to "Claude," and they wanted it changed. Fair enough—Steinberger wasn't looking for a legal fight. He'd just rename the project.

What happened next became one of the most chaotic 10 seconds in open-source history.

The 10-Second Heist

Renaming a project sounds simple. Change the GitHub organization, update the Twitter/X handle, push a commit. Done.

But Steinberger made a critical mistake: he tried to rename both the GitHub organization and the X handle simultaneously. To claim a new handle, you first have to release the old one.

In the gap between releasing "clawdbot" and claiming "moltbot"—approximately 10 seconds—crypto scammers snatched both accounts.

They were watching. They were ready. And they moved faster than anyone thought possible.

The Fake Token Launch

Within minutes of grabbing the accounts, the scammers launched a Solana token called $CLAWD.

The pitch was simple: the viral AI project was doing a token launch. Get in early. This is the next big thing.

It worked. Retail traders on Solana-based meme coin platforms piled in. The token's market cap rocketed to $16 million in hours.

There was just one problem: Peter Steinberger had nothing to do with it.

Steinberger's Response

As soon as Steinberger realized what was happening, he issued a public statement:

"To all crypto folks: Please stop pinging me, stop harassing me. I will never do a coin. Any project that lists me as coin owner is a SCAM. No, I will not accept fees. You are actively damaging the project."

The moment he posted that denial, the market cap cratered. From roughly $8 million, the token plunged to under $800,000—a 90% crash in minutes.

The scammers had already cashed out. They walked away with millions. The retail traders who bought at the top lost everything.

The Chaos Continues

The account hijacking was just the beginning of a disastrous week:

The Name Change Nightmare

• January 27: Clawdbot forced to rename due to Anthropic trademark request
• January 27: Scammers grab old accounts during transition
• January 27: Project becomes "Moltbot"
• January 30: Steinberger renames again to "OpenClaw" (proactively, to avoid future issues)

Three names in seven days. Each change caused confusion, broken links, and outdated documentation across the internet.

The Security Fallout

The same week saw other security disasters:

• 21,000+ exposed OpenClaw instances discovered with no authentication
• 200+ corporate secrets leaked including healthcare documentation and production Kubernetes credentials
• Hundreds of servers found with admin ports open to the public internet

The project that was supposed to revolutionize personal AI assistants was becoming a case study in what can go wrong.

How the Scam Worked

The $CLAWD token scam followed a playbook that's become depressingly common in crypto:

1. Hijack Credibility

By grabbing the official-looking accounts, scammers could post announcements that appeared legitimate. Followers of the real project couldn't tell the difference.

2. Create Urgency

Meme coin traders are trained to move fast. "Early" access to a token from a viral project triggers FOMO. Nobody stops to verify when they think they might miss the next 100x.

3. Pump and Dump

The scammers likely held a significant portion of the initial token supply. As retail buyers drove up the price, they sold their holdings into the buying pressure.

4. Disappear

Once the creator publicly denied involvement, the scam was exposed. But by then, the scammers had already converted to stablecoins or other assets. Blockchain transactions are pseudonymous—tracing and recovering funds is nearly impossible.

Lessons for Project Maintainers

If you're running an open-source project with any visibility, the Clawdbot saga offers some hard lessons:

Never Release a Handle Before Claiming the New One

This seems obvious in hindsight, but the attack window can be measured in seconds. Scammers use bots that monitor for released handles and grab them instantly.

Better approach: Set up the new accounts first, then coordinate a simultaneous transition with redirects from old to new.

Assume Scammers Are Watching

Any project with significant GitHub stars is a target. The more viral your project, the more valuable your identity becomes to bad actors.

Have a Crisis Communication Plan

Steinberger's quick public denial limited the damage. If he'd been asleep or offline for a few more hours, the fake token could have grown even larger before crashing.

Consider Trademark Early

The entire crisis started because of a trademark conflict. If you're building something that might get big, consider the naming implications before you go viral.

Lessons for Users

Verify Everything

Before buying any token associated with a project:

• Check the official website (not social media)
• Look for announcements on multiple verified channels
• Ask in official Discord/community channels
• If it seems too good to be true, it is

Project Creators Rarely Launch Tokens

When open-source developers suddenly announce a token launch, your default assumption should be "scam" until proven otherwise. Real projects announce these things well in advance through multiple official channels.

The Bigger the Hype, the Bigger the Scam Potential

Clawdbot was the hottest project on GitHub. That made it the most attractive target for scammers. Viral moments attract predators.

The Current State

OpenClaw has stabilized since the chaotic week. The project is now at:

• Official name: OpenClaw
• Website: openclaw.ai
• GitHub: openclaw/openclaw

Peter Steinberger has made it abundantly clear: there is no official token, there never will be, and any cryptocurrency claiming association with OpenClaw is fraudulent.

The scammers were never caught. The millions they extracted from retail traders are gone.

What This Means for the Ecosystem

The $CLAWD scam is a reminder that the AI agent space is still the Wild West. The technology is moving faster than the security practices, the legal frameworks, and the user education needed to support it.

When you combine:

• Viral open-source projects
• Cryptocurrency speculation
• Account security gaps
• FOMO-driven retail trading

...you get a recipe for exactly this kind of disaster.

Using OpenClaw Safely

If you want to use OpenClaw without the drama:

1. Only download from official sources — openclaw.ai and the verified GitHub repository
2. Ignore any token announcements — There is no $CLAWD, $MOLT, or $OPENCLAW token
3. Verify account authenticity — Check follower counts, posting history, and cross-reference with the official website
4. Consider managed hosting — Let someone else deal with the constant changes and security updates

ClawdHost provides managed OpenClaw hosting that tracks official releases and handles transitions automatically. When the project renamed three times in a week, our users didn't have to change anything—we updated the infrastructure for them.

No cryptocurrency. No scams. Just a working AI assistant.

Get started with ClawdHost →

---

Sources

• Yahoo Finance: Fake 'ClawdBot' AI Token Hits $16M Before 90% Crash
• DEV Community: From Clawdbot to Moltbot: How a C&D, Crypto Scammers, and 10 Seconds of Chaos Took Down the Internet's Hottest AI Project
• Medium: Clawd to Moltbot to OpenClaw: one week, three names, zero chill
• The Register: OpenClaw ecosystem still suffering severe security issues
• CyberUnit: Clawdbot Update: From Viral Sensation to Security Cautionary Tale