Gate News Report, March 11 — The Ministry of Industry and Information Technology’s Cybersecurity Threats and Vulnerabilities Information Sharing Platform (NVDB), in collaboration with intelligent agent providers, vulnerability collection platforms, and cybersecurity companies, issued a “Six Do’s and Six Don’ts” advisory to prevent security risks associated with the open-source intelligent agent OpenClaw (“Lobster”).
For financial trading scenarios, NVDB pointed out that deploying “Lobster” by enterprises or individuals to call financial application interfaces can enable functions such as automated trading, risk control, quantitative trading, smart research, asset portfolio management, market data collection, strategy analysis, and trade execution. However, there are significant risks of causing erroneous trades or even account hijacking.
Recommended countermeasures include: implementing network isolation and the principle of least privilege, closing unnecessary internet ports; establishing manual review and circuit breaker emergency mechanisms, adding secondary confirmation for critical operations; strengthening supply chain audits, using official components, and regularly patching vulnerabilities; implementing full-chain audit and security monitoring to promptly detect and address security risks.