logo

AI-Coded Moltbook Platform Exposes 1.5 Mn API Keys Through Database Misconfiguration

ID: c234a77e-0497-5240-9e0c-bc5ae683d688

STIX ID: report--c234a77e-0497-5240-9e0c-bc5ae683d688

Feed Name: The Cyber Express

Threat Score
75/100

Date Published: 2026-02-05

Date Updated: 2026-04-23

Author: Mihir Bagwe

...
...

### Executive summary Moltbook, a viral social network built using AI-generated code, exposed roughly 4.75 million database records — including 1.5 million API tokens, ~35,000 user emails, ~29,631 signup emails, ~4,060 private messages (some containing plaintext third‑party API keys) — due to an exposed Supabase client-side API key and missing Row Level Security; Wiz researchers discovered the issue and responsible disclosure resulted in fixes within hours to days.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.