Skip to main content
AVOID.NET
Sign in

CLAWD Token (Fake ClawdBot AI Scam)

avoid.net/clawd-token-fake-clawdbot-ai-scam→2/100·88% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·3PeeKN…NpxC

Summary

The $CLAWD token is a fraudulent Solana memecoin launched in January 2026 by unidentified actors who exploited a roughly 10-second window during the ClawdBot-to-Moltbot brand rename to seize the project's X handle and GitHub organization. Presenting the token as an official launch by the viral open-source AI project, the scammers drove the market cap to approximately $16 million before founder Peter Steinberger publicly denied any involvement and the token collapsed by roughly 90%. No attacker has been publicly identified and investor losses are considered unrecoverable.

Connected Entities

4 entities · 60 linked investigations
Organizations
□Solana62
Tokens
♦CLAWD Token (Fake ClawdBot AI Scam)
Wallets
◇Hoi9Lo…Pump◇ACQCcc…pump
Relationships
  • Hoi9Lo…Pump→mentioned with→CLAWD Token (Fake ClawdBot AI Scam)(50%)
  • ACQCcc…pump→mentioned with→CLAWD Token (Fake ClawdBot AI Scam)(50%)
  • CLAWD Token (Fake ClawdBot AI Scam)→mentioned with→Solana(80%)
Also appears in
Solana·62Jump Trading·42OpenZeppelin AI Exploit Threat Vector·15Shibarium·28Sky (MakerDAO)·51SIGMA Bot·4Crossmint·70Teraswitch (Solana validator hosting concentration incident)·52Socket Security Malicious Browser Extension Campaign August 2026·2Ansem / $ANSEM ("Black Bull") creator-coin controversy·38

Connected Through

2 shared actors · 381 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about CLAWD Token (Fake ClawdBot AI Scam)?

Timeline(11 events)

December 2025

Peter Steinberger launches ClawdBot, an open-source AI assistant that allows users to control their computers through messaging platforms. Approximate launch date; project gains rapid traction.

Decrypt

26 January 2026

ClawdBot reaches approximately 9,000 GitHub stars within 24 hours, attracting widespread media and community attention.

DEV Community

27 January 2026

Anthropic issues a trademark request to Peter Steinberger, citing the similarity between 'Clawd' and 'Claude.' Steinberger begins the rename process to Moltbot.

Forbes

27 January 2026

During the approximately 10-second window between releasing the @clawdbot X handle and securing @moltbot, unidentified scammers seize the old X account and GitHub organization.

Decrypt

27 January 2026

Fraudulent $CLAWD token launched on Solana (Pump.fun launchpad, contract address Hoi9Lo8s2PP7EM9mv9bZjQ3aSB7ijyS238sTqQjbPump). Promoted via the hijacked @clawdbot X account and GitHub organization as an official token launch.

Yahoo Finance / CryptoNews

27 January 2026

Peter Steinberger publicly denies any involvement with the $CLAWD token, stating: 'I will never do a coin. Any project that lists me as coin owner is a SCAM.'

Protos

27 January 2026

$CLAWD token peaks at approximately $16 million market capitalization before Steinberger's denial triggers a sell-off. Market cap falls to under $800,000, a decline of approximately 90%.

Yahoo Finance

28 January 2026

Affected token holders direct harassment at Steinberger. Malwarebytes begins documenting a broader impersonation campaign including typosquat domains and cloned GitHub repositories.

Malwarebytes Threat Intel

29 January 2026

Security researchers from SlowMist, Dvuln, and others publicly document critical vulnerabilities in deployed ClawdBot instances, including remote code execution and credential exposure.

Decrypt

30 January 2026

Project renamed again from Moltbot to OpenClaw. Scams and supply chain attacks against the project's user base continue under the new branding.

Forbes

February 2026

Palo Alto Unit 42 and SC Media report on ClawHavoc, a supply chain poisoning campaign targeting OpenClaw's skills marketplace with over 1,184 malicious skills across 13 developer accounts.

Palo Alto Unit 42
Provenance & Audit Trail
Anchored on SolanaVerify on-chain23 Wayback Archives

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 23 of 24 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 6/30/2026, 5:31:46 PM

last updated: 7/27/2026, 8:40:29 PM

3 views

avoid.net — verified advice for a post-truth world