Key Takeaways
1. Absurd Default Settings: OpenClaw’s default configurations can lead to excessive costs, such as $250 a week just for routine checks, wasting tokens on simple tasks.
2. Eye-Watering Expenses: Users have reported astronomical costs, with one user accumulating over $100 in a single day, and others facing expenses of $380 daily for AI interactions on social media.
3. Security Risks: OpenClaw has 923 exposed gateways online, allowing hackers easy access to systems, potentially compromising user data and smart home networks.
4. Permission Issues: Many users unknowingly configure OpenClaw to allow broad access, increasing vulnerability to external attacks and unauthorized use of API keys.
5. Best Practices: Users should set strict API spending limits, choose cost-effective models for tasks, and review configurations carefully to avoid financial and security issues.
It feels like something out of a sci-fi movie: you download an app, give it access to some tools, and suddenly you have a computer that pays attention to everything you say—an actual AI agent that can manage boring digital tasks all by itself.
However, there are increasing reports of financial troubles and significant security issues. Anyone using OpenClaw (previously called Clawdbot) with incorrect settings runs the risk of not just losing money but also compromising their digital privacy.
Absurd Default Settings
A user shared on X (formerly Twitter) about the ridiculousness of the app’s default configurations. A basic “heartbeat” check, which is meant to confirm every 30 minutes whether there are tasks that need attention (like “remind me to buy milk tomorrow”), sends the whole context window to the API.
This results in transmitting 120,000 tokens for a simple check.
If you look at it over a week, these idle checks would cost approximately $250. This doesn’t even factor in actual conversations or more complex tasks, which, according to tech enthusiast Benjamin De Kraker (on X), could easily add another $20 each day.
Eye-Watering Expenses
While experimenting with OpenClaw, the German tech magazine c’t managed to rack up over $100 in just one day. Yet, the costs can become truly astronomical when the AI agent is given too much leeway on Moltbook, a quickly expanding social network just for AI agents. Reddit users have mentioned expenses reaching $8 every 30 minutes merely for processing new posts. This totals more than $380 a day just to let the AI assistant browse on AI social media.
Although money can be recovered, lost data might be lost forever. Current security investigations show a grim reality for the OpenClaw framework.
Security Risks
Recent scans reveal there are 923 Clawdbot gateways openly exposed online. This indicates: No authentication, no password protection. Because OpenClaw often receives broad permissions—like shell access, browser control, and access to API keys—hackers can easily take over these instances.
The danger goes beyond just losing control of your computer. Depending on the “skills” and devices you’ve enabled for OpenClaw, attackers could wreak havoc on your entire smart home or network. Plus, they can access the stored API keys (OpenAI, Anthropic, etc.) to use a significant amount of tokens for themselves—essentially charging your credit card for their free computing power. This issue is worsened by reports of severe security flaws within the Moltbook platform itself, which the operators seem to be ignoring.
A warning circulating on X by a security researcher states clearly: Many users have their settings configured to allow “all” access (often without realizing it), which lets anyone on the internet connect. However, the post also suggests an easy fix.
OpenClaw and the Moltbook network showcase the huge potential of autonomous agents, but for now, they are “learning tools” that can be dangerous. Anyone looking to use them successfully needs to act like a Systems Administrator.
Best Practices
Current guidelines recommend setting strict API spending limits at the provider’s end, carefully choosing less expensive models for background operations, and thoroughly reviewing configuration files. If not, the vision of a helpful digital assistant could quickly become a financial disaster.
Source:
Link
