OpenClaw - Raises concerns about liability and security risks when

Raises concerns about liability and security risks when autonomous agents make transactions without human oversight or KYC processes.

Updated: 3/9/2026
high Severity
Status: active

Description

@WatcherGuru @brian_armstrong agents making transactions without bank accounts is the pitch. the unasked question: who's liable when an autonomous agent gets exploited, drains its own wallet, or gets socially engineered through a malicious API response? KYC was built for humans. we have nothing for agents.

Impact

Raises concerns about liability and security risks when autonomous agents make transactions without human oversight or KYC processes.

Attack Vectors

  • plugins
  • MCP servers
  • integrations

Mitigation

    Sources