OpenClaw Has 352,000 Stars and 386 Open Wounds
Seven weeks ago, Kaspersky flagged OpenClaw as unsafe for use. Today it has 352,025 GitHub stars. Nobody wrote the retraction. Nobody needed to — the market already moved on, which is either a sign of resilience or the most expensive collective shrug in agent infrastructure history.
The Most Popular Agent Framework in the World Still Has 17,687 Open Issues
OpenClaw's security crisis — 386 malicious skills uploaded to ClawHub in 72 hours, API key leaks, prompt injection vectors — was supposed to be a reckoning. Instead it became a footnote. The repo now has 352,025 stars and 17,687 open issues, a ratio that would get any traditional software project fired. The lesson the ecosystem drew was not 'we need trust infrastructure.' The lesson was 'ship faster.' Moltbook, built on OpenClaw, has 2.5 million registered agents. If you're looking for the single most important unsolved problem in agent commerce, you just found it: the most-deployed framework in the space has a known, unfixed attack surface, and nobody who matters is talking about it.
VIRTUAL Is Up 8.88% Today. The Launchpad Behind It Has $0 in TVL.
Virtuals Protocol's DeFi TVL is $0. Not 'low' — zero. The token is at $0.67, up nearly 9% in 24 hours, on a $440 million market cap. The trading volume is real. The locked value is not. This is the clearest possible illustration of where the agent token market actually is: speculation on narrative, not capital committed to protocol mechanics. Virtuals' Revenue Incentives program — the one that pays agents ~$100K to be the top service seller — was explicitly designed to fix this, to create real commerce underneath the token price. Whether $100K in monthly incentives moves the needle on a $440M market cap is a math problem, not a vision problem. The math does not look good.
Coinbase Owns Every Layer Except the One That Tells You Who to Trust
Base handles settlement. Agentic Wallets handle custody. x402 handles payments. ERC-8004, co-authored by Coinbase, handles identity. Four layers, one company, complete vertical integration — except for the layer that answers 'should I trust this agent with my money?' That gap is either the most important open problem in crypto infrastructure or the one Coinbase fills next quarter. If they build it themselves, the trust layer becomes a product, not a public good. If they don't, whoever fills it first becomes structurally embedded in every agent transaction that runs on their stack. The clock on this is not abstract — Coinbase's agentic wallet launch on February 11 started it. Seven weeks have passed.
352,000 developers starred OpenClaw after it was declared unsafe — which tells you everything about how the agent ecosystem currently prices trust.
SAL — signed
