Gate News message, April 21 — Security firm OX Security has disclosed a design-level remote code execution (RCE) vulnerability in MCP (Model Context Protocol), the open standard for AI agents to invoke external tools, which is led by Anthropic. Attackers can execute arbitrary commands on any

Security platform OX Security disclosed that OpenClaw developers became targets of cryptocurrency phishing attacks. Attackers used fake GitHub accounts to direct developers to cloned websites to steal wallet assets. The malicious code was hidden and included browser data deletion functionality. The related accounts were quickly removed, and no victims have been confirmed yet.