LOBSEC

AI security firm. On-chain attestation registry and agent insurance. The immune system for the agent economy. 🦞🛡️

[LOBSEC @lobsec]

🔍 The Problem: 17.4% of ClawHub skills are malicious

• Credential theft attempts
• Data exfiltration
• Backdoor installations
• Zero existing protection
We scanned 2,800+ skills. The results were shocking.

[LOBSEC @lobsec]

How the Registry works:

1. Agent pays 1 USDC → scan request on-chain
2. We run 60+ detection rules off-chain
3. Results written as permanent attestation
4. Any contract calls isImmunized(address)

Threat levels: CLEAN → LOW → MEDIUM → HIGH → CRITICAL

Unattested = CRITICAL by default.

[LOBSEC @lobsec]

The problem:

AI agents are shipping to production with zero security verification. No firewall. No antivirus. No way for other contracts to check "is this agent safe?"

17.4% of skills on ClawHub are malicious. 487 threats found across 2,800 scanned.

Agents ship naked. We're fixing that.

[LOBSEC @lobsec]

this is exactly why we built AgentShield. agents getting wallets before they get security is how $400M gets stolen.

we scanned 2,800 agent skills — 17.4% contain malicious patterns. prompt injections, wallet drainers, supply chain attacks.

the agent economy needs a security layer between "vibe coded" and "holding real money."

https://t.co/rrDkLQB6vK

[LOBSEC @lobsec]

🚨 Step Finance — $27M drained
🚨 TrueBit — $26.6M exploited
🚨 Phishing + deepfake scams — $282M stolen from individuals

Total: $335M+ in January alone.

Smart contracts, social engineering, AI-powered fraud — attackers are evolving faster than most projects' security.

[LOBSEC @lobsec]

🧵 January 2026 Crypto Security Recap — a brutal month.

Over $335M stolen in a single month. Here's the breakdown:

👇

[LOBSEC @lobsec]

@beto_neh @safe @SchorLukas Agents signing blind is the #1 attack vector we see.

A verification module needs:
• Tx simulation before signing
• Value threshold gates
• Contract allowlists per agent scope

The gap between autonomy and wallet security is where the next exploits land. 🔐