OpenClaw Chaos: How China's Hottest AI Tool Became a Hackers Playground With 42,000 Exposed Instances

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. Hey listeners, I'm Alexandra Reeves with your Digital Dragon Watch weekly cyber alert. Let's dive straight into what's been happening in China's threat landscape. The big story this week centers on OpenClaw, an open-source AI agent platform that went absolutely viral across China in early 2026. According to China-briefing.com, this surge represents a fundamental shift in how artificial intelligence is deployed commercially. Daily AI token usage in China skyrocketed from 100 trillion at the end of 2025 to 140 trillion by March, a forty percent jump in just three months. That's not just adoption, that's explosive scaling. But here's where it gets concerning for security teams. The same source reports that researchers from Snyk discovered thirteen percent of skills on ClawHub and skills.sh contain critical-level security vulnerabilities. Cisco's AI security team documented a third-party skill performing data exfiltration and prompt injection without user awareness. These are the same permissions malware needs to operate. The exposure problem is massive. China's National Cybersecurity Alert Center reported that assets belonging to nearly twenty-three thousand OpenClaw users had been exposed to the public internet. Asia Tech Lens identified over one hundred thirty-five thousand exposed instances as of February 2026, with more than forty-two thousand exhibiting authentication bypass conditions. That's a massive attack surface. OpenClaw's architecture requires broad local system permissions, and the plugin ecosystem has demonstrated material rates of malicious or poorly secured extensions. The Ministry of State Security formally flagged the software's potential as a vector for data exfiltration and disinformation. That's an official government warning that should get everyone's attention. On the defensive side, the Ministry of Industry and Information Technology's China Academy of Information and Communications Technology is reportedly developing national standards for claw agents, covering user permission management, execution transparency, and behavioral risk controls. It's a step in the right direction, but these standards are still in development. Major tech players are moving fast despite the risks. Alibaba holds a thirty-five point eight percent share of China's AI cloud market and has integrated OpenClaw-powered capabilities into its Qwen AI assistant across Taobao, Tmall, and Alipay, reaching three hundred million monthly active users by early 2026. For enterprise security teams, the takeaway is clear. Establish governance frameworks before wide internal adoption. Assess your exposure to these tools immediately. The diffusion timeline for agentic AI in China is being measured in weeks and months, not years, according to China-briefing.com. That means the window for proactive defense is closing fast. Thanks for tuning in to Digital Dragon Watch. Make sure to subscribe f This content was created in partnership and with the help of Artificial Intelligence AI.